Crash in textshaping, Analyzed 2 dumps, total processed 4684, rate equals 0.04%

Top 1: Version = v1.7224.1005.626, Total count = 1

dump count = 1

ChildEBP RetAddr  
047bdffc 51499936 TextShaping!otlResourceMgr::getOtlTable+0x2
047be04c 514930b4 TextShaping!otlRealizedFeatureVariation::CalculateSubstitutions+0x26
047be084 51495b35 TextShaping!GetScriptFeatureLookupLists+0x284
047be294 51491b71 TextShaping!ApplyFeatures+0xb5
047be318 5147e36d TextShaping!SubstituteOtlGlyphs+0x181
047be340 5147a4db TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
047be5dc 5146cd76 TextShaping!GenericEngineGetGlyphs+0x79b
047be6a8 77340766 TextShaping!ShapingGetGlyphs+0x356
047be7dc 7733fc18 gdi32full!ShlShapeOT+0x1c6
047be830 7733eb99 gdi32full!ScriptShape+0x148
047be8a8 7733e2c9 gdi32full!RenderItemNoFallback+0x5f9
047be8e0 7733e188 gdi32full!RenderItemWithFallback+0x119
047be908 7733df0e gdi32full!RenderItem+0x28
047be960 7733b2c8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
047bedc4 7733a68f gdi32full!ScriptStringAnalyse+0x738
047bef3c 7733aab8 gdi32full!LpkCharsetDraw+0x60f
047bf008 77342a22 gdi32full!GetTextMetricsW+0x108
047bf03c 7698cbfb gdi32full!IntersectClipRectImpl+0x42
047bf10c 7698c9fe user32!DrawTextExWorker+0x1f9
047bf128 71e2e6ca user32!DrawTextExW+0x1e
047bf18c 71e2dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
047bf1d4 71e243c9 uxtheme!GetThemeTextExtent+0x74
047bf228 71e30f87 uxtheme!_GetNcCaptionTextSize+0x61
047bf318 71e3293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
047bf3c4 71e329ef uxtheme!_WindowPosChangedWorker+0x7c
047bf3d0 71e2f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
047bf420 76997c83 uxtheme!ThemePostWndProc+0x355
047bf50c 76997870 user32!UserCallWinProcCheckWow+0x363
047bf570 7699f5e7 user32!DispatchClientMessage+0x190
047bf5b0 775756cd user32!__fnINLPWINDOWPOS+0x37
047bf600 71e4d44f ntdll!KiUserCallbackDispatcher+0x4d
047bf62c 71e300ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
047bf688 76997c2f uxtheme!ThemePreWndProc+0x43f
047bf774 76996500 user32!UserCallWinProcCheckWow+0x30f
047bf7f0 76996030 user32!DispatchMessageWorker+0x4c0
047bf7fc 7cd4f5a1 user32!DispatchMessageW+0x10
047bf820 7cd4f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
047bf880 7cd5196f CfgRelayEx!CConfigCenterStub::Process+0xa7
047bf88c 7cd6ffcb CfgRelayEx!CThread::ThreadProc+0x1f
047bf8c8 7647fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
047bf8d8 775682ae kernel32!BaseThreadInitThunk+0x19
047bf934 7756827e ntdll!__RtlUserThreadStart+0x2f
047bf944 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: Version = v10.1125.1030.411, Total count = 1

dump count = 1

ChildEBP RetAddr  
0509e01c 5f61b5b3 gdi32full!CUspShapingFont::GetDefaultGlyphs+0xf
0509e2b0 76af5038 TextShaping!ShapingCreateFontCacheData+0x133
0509e3c8 76af4faa gdi32full!ShlLoadFont+0x79
0509e970 76af6f9f gdi32full!LoadFont+0x5b7
0509e994 76af5a69 gdi32full!FindOrCreateFaceCache+0x98
0509ea98 76ac9d6c gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0509ee38 76aca196 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2ac
0509ef44 76ac790b gdi32full!ScriptStringAnalyse+0x3e6
0509f09c 76ac7170 gdi32full!LpkCharsetDraw+0x53b
0509f0c8 76dac903 gdi32full!LpkDrawTextEx+0x30
0509f14c 76dac2fd user32!DT_GetLineBreak+0x113
0509f20c 76dc698e user32!DrawTextExWorker+0x1ed
0509f228 733bee89 user32!DrawTextExW+0x1e
0509f6c4 733bc349 uxtheme!CThemeWnd::GetNcWindowMetrics+0x809
0509f810 76da70c3 uxtheme!_ThemeDefWindowProc+0x899
0509f904 76da6b2a user32!UserCallWinProcCheckWow+0x4d3
0509f968 76db0217 user32!DispatchClientMessage+0xea
0509f9a8 77ba71dc user32!__fnINLPWINDOWPOS+0x37
0509f9f8 733eb77f ntdll!KiUserCallbackDispatcher+0x4c
0509fa24 733bdd73 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0509fa80 76da706a uxtheme!ThemePreWndProc+0x413
0509fb74 76da59c8 user32!UserCallWinProcCheckWow+0x47a
0509fbf0 76da5500 user32!DispatchMessageWorker+0x4b8
0509fbfc 58fea8b4 user32!DispatchMessageW+0x10
0509fc74 58feca6f ConfigCenterStub!CConfigCenterStub::Process+0x114
0509fc80 5900938b ConfigCenterStub!CThread::ThreadProc+0x1f
0509fcbc 76b96839 ConfigCenterStub!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0509fccc 77b9906f kernel32!BaseThreadInitThunk+0x19
0509fd24 77b9903d ntdll!__RtlUserThreadStart+0x2b
0509fd34 00000000 ntdll!_RtlUserThreadStart+0x1b