Crash in cfgrelayex, Analyzed 2 dumps, total processed 368, rate equals 0.54%

Top 1: Version = 2.8325.1000.113, Total count = 2

dump count = 1

ChildEBP RetAddr  
03c9e048 771501aa ntdll!RtlpWaitOnCriticalSection+0x22
03c9e080 7714fff9 ntdll!RtlpEnterCriticalSectionContended+0x1aa
03c9e088 771572a5 ntdll!RtlEnterCriticalSection+0x49
03c9e234 77156f0c ntdll!RtlpAllocateHeap+0x1e5
03c9e2d0 77155eae ntdll!RtlpAllocateHeapInternal+0x104c
03c9e2e8 75832d3d ntdll!RtlAllocateHeap+0x3e
03c9e300 7582f17c gdi32full!UspAllocCache+0x2d
03c9e400 7582eab1 gdi32full!CacheFontLinkingData+0xf8
03c9e420 75831304 gdi32full!IsFontRegLinked+0x28
03c9e9c8 75831ba6 gdi32full!LoadFont+0x336
03c9e9ec 758323c9 gdi32full!FindOrCreateFaceCache+0x98
03c9eaf0 75839784 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03c9ee98 75837b86 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
03c9f304 75836c7f gdi32full!ScriptStringAnalyse+0xa16
03c9f47c 758370a8 gdi32full!LpkCharsetDraw+0x60f
03c9f548 7583ea62 gdi32full!GetTextMetricsW+0x108
03c9f57c 7596c4eb gdi32full!IntersectClipRectImpl+0x42
03c9f64c 7596c2ee user32!DrawTextExWorker+0x1f9
03c9f668 70d4e77a user32!DrawTextExW+0x1e
03c9f6cc 70d4de14 uxtheme!CTextDraw::GetTextExtent+0xa4
03c9f714 70d443e9 uxtheme!GetThemeTextExtent+0x74
03c9f768 70d51027 uxtheme!_GetNcCaptionTextSize+0x61
03c9f85c 70d529dc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
03c9f908 70d52a8f uxtheme!_WindowPosChangedWorker+0x7c
03c9f914 70d4f5f5 uxtheme!OnOwpPostWindowPosChanged+0x1f
03c9f964 75977bb3 uxtheme!ThemePostWndProc+0x355
03c9fa4c 7597778a user32!UserCallWinProcCheckWow+0x363
03c9fab0 7597eba7 user32!DispatchClientMessage+0xea
03c9faf0 77184f5d user32!__fnINLPWINDOWPOS+0x37
03c9fb40 70d6d7ef ntdll!KiUserCallbackDispatcher+0x4d
03c9fb6c 70d5018f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03c9fbc8 75977b5f uxtheme!ThemePreWndProc+0x43f
03c9fcb0 759758fa user32!UserCallWinProcCheckWow+0x30f
03c9fd24 759756c0 user32!DispatchMessageWorker+0x22a
03c9fd30 526c24f1 user32!DispatchMessageW+0x10
03c9fd54 526c2247 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03c9fdb4 526c48bf CfgRelayEx!CConfigCenterStub::Process+0xa7
03c9fdc0 526eb53b CfgRelayEx!CThread::ThreadProc+0x1f
03c9fdfc 75cefa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03c9fe0c 77177b5e kernel32!BaseThreadInitThunk+0x19
03c9fe68 77177b2e ntdll!__RtlUserThreadStart+0x2f
03c9fe78 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0408f998 0faaf1f4 CfgRelayEx!Pickle::headerT<IPC::Message::Header>
0408f9ac 0faaf583 CfgRelayEx!WTL::CMessageLoop::PreTranslateMessage+0x14
0408f9d0 0faaf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xa3
0408fa30 0fab196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0408fa3c 0facffcb CfgRelayEx!CThread::ThreadProc+0x1f
0408fa78 769f347d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0408fa84 77dd9852 kernel32!BaseThreadInitThunk+0xe
0408fac4 77dd9825 ntdll!__RtlUserThreadStart+0x70
0408fadc 00000000 ntdll!_RtlUserThreadStart+0x1b