Crash in textshaping, Analyzed 6 dumps, total processed 5805, rate equals 0.10%

Top 1: Version = v10.1125.1030.411, Total count = 3

dump count = 1

ChildEBP RetAddr  
075fe004 6c405955 TextShaping!GetScriptFeatureLookupLists+0xb
075fe214 6c401991 TextShaping!ApplyFeatures+0xb5
075fe298 6c3ee18d TextShaping!SubstituteOtlGlyphs+0x181
075fe2c0 6c3ea2fb TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
075fe55c 6c3dcb96 TextShaping!GenericEngineGetGlyphs+0x79b
Map C:\Windows\System32\wininet.dll:
  Image region 408400:e400 does not fit in mapping
075fe628 761ac7b6 TextShaping!ShapingGetGlyphs+0x356
075fe75c 761abc78 gdi32full!ShlShapeOT+0x1c6
075fe7b0 761ab179 gdi32full!ScriptShape+0x148
075fe828 761aa8a9 gdi32full!RenderItemNoFallback+0x5f9
075fe860 761aa768 gdi32full!RenderItemWithFallback+0x119
075fe888 761aa4ee gdi32full!RenderItem+0x28
075fe8e0 761a78a8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
075fed44 761a6c7f gdi32full!ScriptStringAnalyse+0x738
075feebc 761a70a8 gdi32full!LpkCharsetDraw+0x60f
075fef88 761aea62 gdi32full!GetTextMetricsW+0x108
075fefbc 7625c4eb gdi32full!IntersectClipRectImpl+0x42
075ff08c 7625c2ee user32!DrawTextExWorker+0x1f9
075ff0a8 71a6e77a user32!DrawTextExW+0x1e
075ff10c 71a6de14 uxtheme!CTextDraw::GetTextExtent+0xa4
075ff154 71a643e9 uxtheme!GetThemeTextExtent+0x74
075ff1a8 71a71027 uxtheme!_GetNcCaptionTextSize+0x61
075ff29c 71a729dc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
075ff348 71a72a8f uxtheme!_WindowPosChangedWorker+0x7c
075ff354 71a6f5f5 uxtheme!OnOwpPostWindowPosChanged+0x1f
075ff3a4 76267bb3 uxtheme!ThemePostWndProc+0x355
075ff48c 7626778a user32!UserCallWinProcCheckWow+0x363
075ff4f0 7626eba7 user32!DispatchClientMessage+0xea
075ff530 77d34f5d user32!__fnINLPWINDOWPOS+0x37
075ff580 71a8d7ef ntdll!KiUserCallbackDispatcher+0x4d
075ff5ac 71a7018f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
075ff608 76267b5f uxtheme!ThemePreWndProc+0x43f
075ff6f0 762658fa user32!UserCallWinProcCheckWow+0x30f
075ff764 762656c0 user32!DispatchMessageWorker+0x22a
075ff770 6f5f76a1 user32!DispatchMessageW+0x10
075ff794 6f5f73e7 PopMgrStub!WTL::CMessageLoop::Run+0xc1
075ff7f4 6f5f9b0f PopMgrStub!CPopMgrStub::Process+0xa7
075ff800 6f6a4a84 PopMgrStub!CThread::ThreadProc+0x1f
075ff83c 7607fa29 PopMgrStub!thread_start<unsigned int (__stdcall*)(void *)>+0x57
075ff84c 77d27b5e kernel32!BaseThreadInitThunk+0x19
075ff8a8 77d27b2e ntdll!__RtlUserThreadStart+0x2f
075ff8b8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0546e004 65fd5b35 TextShaping!GetScriptFeatureLookupLists+0xb
0546e214 65fd1b71 TextShaping!ApplyFeatures+0xb5
0546e298 65fbe36d TextShaping!SubstituteOtlGlyphs+0x181
0546e2c0 65fba4db TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
0546e55c 65facd76 TextShaping!GenericEngineGetGlyphs+0x79b
0546e628 75ae0766 TextShaping!ShapingGetGlyphs+0x356
0546e75c 75adfc18 gdi32full!ShlShapeOT+0x1c6
0546e7b0 75adeb99 gdi32full!ScriptShape+0x148
0546e828 75ade2c9 gdi32full!RenderItemNoFallback+0x5f9
0546e860 75ade188 gdi32full!RenderItemWithFallback+0x119
0546e888 75addf0e gdi32full!RenderItem+0x28
0546e8e0 75adb2c8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
0546ed44 75ada68f gdi32full!ScriptStringAnalyse+0x738
0546eedc 75ad9ee0 gdi32full!LpkCharsetDraw+0x60f
0546ef08 756fd22d gdi32full!LpkDrawTextEx+0x30
0546ef64 756fd0c4 user32!DT_DrawStr+0x5f
0546efc4 756fcbfb user32!DT_GetLineBreak+0xa2
0546f094 756fc9fe user32!DrawTextExWorker+0x1f9
0546f0b0 7171e6ca user32!DrawTextExW+0x1e
0546f114 7171dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0546f15c 717143c9 uxtheme!GetThemeTextExtent+0x74
0546f1b0 71720f87 uxtheme!_GetNcCaptionTextSize+0x61
0546f2a0 7172293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0546f34c 717229ef uxtheme!_WindowPosChangedWorker+0x7c
0546f358 7171f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0546f3a8 75707c83 uxtheme!ThemePostWndProc+0x355
0546f494 75707870 user32!UserCallWinProcCheckWow+0x363
0546f4f8 7570f5e7 user32!DispatchClientMessage+0x190
0546f538 771156cd user32!__fnINLPWINDOWPOS+0x37
0546f588 7173d44f ntdll!KiUserCallbackDispatcher+0x4d
0546f5b4 717200ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0546f610 75707c2f uxtheme!ThemePreWndProc+0x43f
0546f6fc 75706500 user32!UserCallWinProcCheckWow+0x30f
0546f778 75706030 user32!DispatchMessageWorker+0x4c0
0546f784 7b98a8b4 user32!DispatchMessageW+0x10
0546f7fc 7b98ca6f ConfigCenterStub!CConfigCenterStub::Process+0x114
0546f808 7b9a938b ConfigCenterStub!CThread::ThreadProc+0x1f
0546f844 755ffcc9 ConfigCenterStub!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0546f854 771082ae kernel32!BaseThreadInitThunk+0x19
0546f8b0 7710827e ntdll!__RtlUserThreadStart+0x2f
0546f8c0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0460e16c 77246f0c ntdll!RtlpAllocateHeap+0x1e
0460e208 77245eae ntdll!RtlpAllocateHeapInternal+0x104c
0460e224 76f72d3d ntdll!RtlAllocateHeap+0x3e
0460e23c 76f71f31 gdi32full!UspAllocCache+0x2d
0460e258 76f71db8 gdi32full!CUspShapingCacheWriterBuffer::Allocate+0x1d
0460e270 6a73b792 gdi32full!CUspShapingCacheWriter::AllocateCacheSlot+0x48
0460e4f8 76f713ce TextShaping!ShapingCreateFontCacheData+0x822
0460e610 76f712d5 gdi32full!ShlLoadFont+0x79
0460ebb8 76f71ba6 gdi32full!LoadFont+0x307
0460ebdc 76f723c9 gdi32full!FindOrCreateFaceCache+0x98
0460ece0 76f77a9b gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0460f144 76f76c7f gdi32full!ScriptStringAnalyse+0x92b
0460f2ec 76f764d0 gdi32full!LpkCharsetDraw+0x60f
0460f318 750fcb1d gdi32full!LpkDrawTextEx+0x30
0460f374 750fc9b4 user32!DT_DrawStr+0x5f
0460f3d4 750fc4eb user32!DT_GetLineBreak+0xa2
0460f4a4 750fc2ee user32!DrawTextExWorker+0x1f9
0460f4c0 711be77a user32!DrawTextExW+0x1e
0460f524 711bde14 uxtheme!CTextDraw::GetTextExtent+0xa4
0460f56c 711b43e9 uxtheme!GetThemeTextExtent+0x74
0460f5c0 711c1027 uxtheme!_GetNcCaptionTextSize+0x61
0460f6b4 711c29dc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0460f760 711c2a8f uxtheme!_WindowPosChangedWorker+0x7c
0460f76c 711bf5f5 uxtheme!OnOwpPostWindowPosChanged+0x1f
0460f7bc 75107bb3 uxtheme!ThemePostWndProc+0x355
0460f8a4 7510778a user32!UserCallWinProcCheckWow+0x363
0460f908 7510eba7 user32!DispatchClientMessage+0xea
0460f948 77274f5d user32!__fnINLPWINDOWPOS+0x37
0460f998 711dd7ef ntdll!KiUserCallbackDispatcher+0x4d
0460f9c4 711c018f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0460fa20 75107b5f uxtheme!ThemePreWndProc+0x43f
0460fb08 751058fa user32!UserCallWinProcCheckWow+0x30f
0460fb7c 751056c0 user32!DispatchMessageWorker+0x22a
0460fb88 509d6fa4 user32!DispatchMessageW+0x10
0460fbe8 509d907f ConfigCenterStub!CConfigCenterStub::Process+0x114
0460fbf4 509e6477 ConfigCenterStub!CThread::ThreadProc+0x1f
0460fc30 75b9fa29 ConfigCenterStub!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0460fc40 77267b5e kernel32!BaseThreadInitThunk+0x19
0460fc9c 77267b2e ntdll!__RtlUserThreadStart+0x2f
0460fcac 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: Version = v1.8325.1020.415, Total count = 2

dump count = 1

ChildEBP RetAddr  
054be00c 65c53848 TextShaping!COtlsClient::GetOtlTable+0x90
054be044 65c564f5 TextShaping!GetScriptFeatureLookupLists+0x58
054be254 65c52531 TextShaping!ApplyFeatures+0xb5
054be2d8 65c3ed1d TextShaping!SubstituteOtlGlyphs+0x181
054be300 65c3ae8b TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
054be59c 65c2d716 TextShaping!GenericEngineGetGlyphs+0x79b
054be668 7615dd26 TextShaping!ShapingGetGlyphs+0x356
054be79c 7615d1e8 gdi32full!ShlShapeOT+0x1c6
054be7f0 7615c6e9 gdi32full!ScriptShape+0x148
054be868 7615be19 gdi32full!RenderItemNoFallback+0x5f9
054be8a0 7615bcd8 gdi32full!RenderItemWithFallback+0x119
054be8c8 7615ba5e gdi32full!RenderItem+0x28
054be920 76158e18 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
054bed84 761581ef gdi32full!ScriptStringAnalyse+0x738
054bef34 76157a40 gdi32full!LpkCharsetDraw+0x60f
054bef60 768ad3cd gdi32full!LpkDrawTextEx+0x30
054befbc 768ad264 user32!DT_DrawStr+0x5f
054bf01c 768acd9b user32!DT_GetLineBreak+0xa2
054bf0ec 768acb9e user32!DrawTextExWorker+0x1f9
054bf108 737ee6ca user32!DrawTextExW+0x1e
054bf16c 737edd34 uxtheme!CTextDraw::GetTextExtent+0xa4
054bf1b4 737e43c9 uxtheme!GetThemeTextExtent+0x74
054bf208 737f0f87 uxtheme!_GetNcCaptionTextSize+0x61
054bf2f8 737f293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
054bf3a4 737f29ef uxtheme!_WindowPosChangedWorker+0x7c
054bf3b0 737ef545 uxtheme!OnOwpPostWindowPosChanged+0x1f
054bf400 768b7d93 uxtheme!ThemePostWndProc+0x355
054bf4ec 768b796a user32!UserCallWinProcCheckWow+0x363
054bf550 768bf6b7 user32!DispatchClientMessage+0xea
054bf590 77a954bd user32!__fnINLPWINDOWPOS+0x37
054bf5e0 76f0124c ntdll!KiUserCallbackDispatcher+0x4d
054bf5e4 7380d44f win32u!NtUserSetWindowPos+0xc
054bf610 737f00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
054bf66c 768b7d3f uxtheme!ThemePreWndProc+0x43f
054bf758 768b66a1 user32!UserCallWinProcCheckWow+0x30f
054bf7d4 768b61c0 user32!DispatchMessageWorker+0x4d1
054bf7e0 78af3fc1 user32!DispatchMessageW+0x10
054bf804 78af3e7b AcMgr!WTL::CMessageLoop::Run+0xc1
054bf860 78af7b7f AcMgr!CPopMgrTrayClient::Process+0x8b
054bf86c 78bb06d3 AcMgr!CThread::ThreadProc+0x1f
054bf8a8 75bffcc9 AcMgr!thread_start<unsigned int (__stdcall*)(void *)>+0x57
054bf8b8 77a8809e kernel32!BaseThreadInitThunk+0x19
054bf914 77a8806e ntdll!__RtlUserThreadStart+0x2f
054bf924 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0459e154 5d3f2631 TextShaping!ApplyFeatures+0x17
0459e1d8 5d3dee2d TextShaping!SubstituteOtlGlyphs+0x181
0459e200 5d3daf9b TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
0459e49c 5d3cd826 TextShaping!GenericEngineGetGlyphs+0x79b
0459e568 77330766 TextShaping!ShapingGetGlyphs+0x356
0459e69c 7732fc18 gdi32full!ShlShapeOT+0x1c6
0459e6f0 7732eb99 gdi32full!ScriptShape+0x148
0459e768 7732e2c9 gdi32full!RenderItemNoFallback+0x5f9
0459e7a0 7732e188 gdi32full!RenderItemWithFallback+0x119
0459e7c8 7732df0e gdi32full!RenderItem+0x28
0459e820 7732b2c8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
0459ec84 7732a68f gdi32full!ScriptStringAnalyse+0x738
0459ee3c 77329ee0 gdi32full!LpkCharsetDraw+0x60f
0459ee68 75ded4fd gdi32full!LpkDrawTextEx+0x30
0459eec4 75ded394 user32!DT_DrawStr+0x5f
0459ef24 75dececb user32!DT_GetLineBreak+0xa2
0459eff4 75deccce user32!DrawTextExWorker+0x1f9
0459f010 6748e6ca user32!DrawTextExW+0x1e
0459f074 6748dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0459f0bc 674843c9 uxtheme!GetThemeTextExtent+0x74
0459f110 67490f87 uxtheme!_GetNcCaptionTextSize+0x61
0459f200 6749293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0459f2ac 674929ef uxtheme!_WindowPosChangedWorker+0x7c
0459f2b8 6748f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0459f308 75df7f43 uxtheme!ThemePostWndProc+0x355
0459f3f4 75df7b30 user32!UserCallWinProcCheckWow+0x363
0459f458 75dff897 user32!DispatchClientMessage+0x190
0459f498 779e56cd user32!__fnINLPWINDOWPOS+0x37
0459f4e8 674ad44f ntdll!KiUserCallbackDispatcher+0x4d
0459f514 674900ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0459f570 75df7eef uxtheme!ThemePreWndProc+0x43f
0459f65c 75df67c0 user32!UserCallWinProcCheckWow+0x30f
0459f6d8 75df62f0 user32!DispatchMessageWorker+0x4c0
0459f6e4 55ec24f1 user32!DispatchMessageW+0x10
0459f708 55ec2247 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0459f768 55ec48bf CfgRelayEx!CConfigCenterStub::Process+0xa7
0459f774 55eeb53b CfgRelayEx!CThread::ThreadProc+0x1f
0459f7b0 76b0fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0459f7c0 779d82ae kernel32!BaseThreadInitThunk+0x19
0459f81c 779d827e ntdll!__RtlUserThreadStart+0x2f
0459f82c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: Version = v10.1125.1035.417, Total count = 1

dump count = 1

ChildEBP RetAddr  
055ae00c 63812e88 TextShaping!COtlsClient::GetOtlTable+0x90
055ae044 63815b35 TextShaping!GetScriptFeatureLookupLists+0x58
055ae254 63811b71 TextShaping!ApplyFeatures+0xb5
055ae2d8 637fe36d TextShaping!SubstituteOtlGlyphs+0x181
055ae300 637fa4db TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
055ae59c 637ecd76 TextShaping!GenericEngineGetGlyphs+0x79b
055ae668 75a00766 TextShaping!ShapingGetGlyphs+0x356
055ae79c 759ffc18 gdi32full!ShlShapeOT+0x1c6
055ae7f0 759feb99 gdi32full!ScriptShape+0x148
055ae868 759fe2c9 gdi32full!RenderItemNoFallback+0x5f9
055ae8a0 759fe188 gdi32full!RenderItemWithFallback+0x119
055ae8c8 759fdf0e gdi32full!RenderItem+0x28
055ae920 759fb2c8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
055aed84 759fa68f gdi32full!ScriptStringAnalyse+0x738
055aef34 759f9ee0 gdi32full!LpkCharsetDraw+0x60f
055aef60 776ad22d gdi32full!LpkDrawTextEx+0x30
055aefbc 776ad0c4 user32!DT_DrawStr+0x5f
055af01c 776acbfb user32!DT_GetLineBreak+0xa2
055af0ec 776ac9fe user32!DrawTextExWorker+0x1f9
055af108 7245e6ca user32!DrawTextExW+0x1e
055af16c 7245dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
055af1b4 724543c9 uxtheme!GetThemeTextExtent+0x74
055af208 72460f87 uxtheme!_GetNcCaptionTextSize+0x61
055af2f8 7246293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
055af3a4 724629ef uxtheme!_WindowPosChangedWorker+0x7c
055af3b0 7245f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
055af400 776b7c83 uxtheme!ThemePostWndProc+0x355
055af4ec 776b7870 user32!UserCallWinProcCheckWow+0x363
055af550 776bf5e7 user32!DispatchClientMessage+0x190
055af590 77ba56cd user32!__fnINLPWINDOWPOS+0x37
055af5e0 77b0124c ntdll!KiUserCallbackDispatcher+0x4d
055af5e4 7247d44f win32u!NtUserSetWindowPos+0xc
055af610 724600ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
055af66c 776b7c2f uxtheme!ThemePreWndProc+0x43f
055af758 776b6500 user32!UserCallWinProcCheckWow+0x30f
055af7d4 776b6030 user32!DispatchMessageWorker+0x4c0
055af7e0 0545a8b4 user32!DispatchMessageW+0x10
055af858 0545ca6f ConfigCenterStub!CConfigCenterStub::Process+0x114
055af864 0547938b ConfigCenterStub!CThread::ThreadProc+0x1f
055af8a0 76affcc9 ConfigCenterStub!thread_start<unsigned int (__stdcall*)(void *)>+0x57
055af8b0 77b982ae kernel32!BaseThreadInitThunk+0x19
055af90c 77b9827e ntdll!__RtlUserThreadStart+0x2f
055af91c 00000000 ntdll!_RtlUserThreadStart+0x1b