Crash in cfgrelayex, Analyzed 4 dumps, total processed 1977, rate equals 0.20%

Top 1: Version = 2.8425.1000.113, Total count = 4

dump count = 1

ChildEBP RetAddr  
04fee120 7511433f gdi32full!GetFontRealizationInfo+0x1c
04fee6d0 7510a1bb gdi32full!LoadFont+0x70
04fee6f4 7510a312 gdi32full!FindOrCreateFaceCache+0xc7
04fee800 750a8ae5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04feeba8 750a94db gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04feecc4 750aa873 gdi32full!ScriptStringAnalyse+0x3eb
04feee60 750a8733 gdi32full!LpkCharsetDraw+0xa93
04feeea0 771ef11b gdi32full!LpkDrawTextEx+0x203
04feef04 771ef021 user32!DT_DrawStr+0x69
04feef5c 771eec1e user32!DT_GetLineBreak+0xf8
04fef02c 7725c76e user32!DrawTextExWorker+0x1c4
04fef048 65680f64 user32!DrawTextExW+0x1e
04fef0ac 65686f4a uxtheme!CTextDraw::GetTextExtent+0x109
04fef0f4 6567875d uxtheme!GetThemeTextExtent+0x8a
04fef148 656468ba uxtheme!_GetNcCaptionTextSize+0x61
04fef2c0 65647bfe uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04fef3a4 6564c32f uxtheme!_WindowPosChangedWorker+0x73
04fef3b0 656490e0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04fef418 771e4260 uxtheme!ThemePostWndProc+0x340
04fef514 771e3cb0 user32!UserCallWinProcCheckWow+0x4f0
04fef578 771f1027 user32!DispatchClientMessage+0x190
04fef5b8 773f932d user32!__fnINLPWINDOWPOS+0x37
04fef608 751912ac ntdll!KiUserCallbackDispatcher+0x4d
04fef60c 656769df win32u!NtUserSetWindowPos+0xc
04fef638 6564a478 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04fef6b8 771e4208 uxtheme!ThemePreWndProc+0x988
04fef7b4 771e2a48 user32!UserCallWinProcCheckWow+0x498
04fef830 771e25b0 user32!DispatchMessageWorker+0x488
04fef83c 5321f5a1 user32!DispatchMessageW+0x10
04fef860 5321f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04fef8c0 5322196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04fef8cc 5323ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04fef908 75b57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04fef918 773ec28b kernel32!BaseThreadInitThunk+0x19
04fef970 773ec20f ntdll!__RtlUserThreadStart+0x2b
04fef980 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
047df9e0 00e0d4ae CfgRelayEx!ATL::ChTraitsCRT<wchar_t>::StringCompare+0x15
047df9fc 00e0cbd5 CfgRelayEx!ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >::Compare+0x5e
047dfa0c 00e0cd24 CfgRelayEx!ATL::operator<+0x15
047dfa20 00e0f29e CfgRelayEx!std::less<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >::operator()+0x14
047dfa34 00e0b583 CfgRelayEx!std::_Tree<std::_Tmap_traits<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::shared_ptr<CClient>,std::less<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >,std::allocator<std::pair<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > const ,std::shared_ptr<CClient> > >,0> >::_Compare+0x1e
047dfa50 00e10575 CfgRelayEx!std::_Tree<std::_Tmap_traits<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::shared_ptr<CClient>,std::less<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >,std::allocator<std::pair<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > const ,std::shared_ptr<CClient> > >,0> >::_Lbound<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >+0x43
047dfa64 00e10449 CfgRelayEx!std::_Tree<std::_Tmap_traits<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::shared_ptr<CClient>,std::less<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >,std::allocator<std::pair<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > const ,std::shared_ptr<CClient> > >,0> >::lower_bound+0x25
047dfa90 00e0dbae CfgRelayEx!std::_Tree<std::_Tmap_traits<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::shared_ptr<CClient>,std::less<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >,std::allocator<std::pair<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > const ,std::shared_ptr<CClient> > >,0> >::find+0x19
047dfacc 00e0e4b0 CfgRelayEx!CContainer<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::shared_ptr<CClient> >::Get+0x4e
047dfb58 00e0e3c2 CfgRelayEx!CClientMgr::OnSlowCfgRefresh+0xe0
047dfb70 00e162e0 CfgRelayEx!CClientMgr::OnReceiveMessage+0x42
047dfbcc 00e1615f CfgRelayEx!CChannelImpl::ReceiveThreadImp+0x170
047dfbd4 00e3b53b CfgRelayEx!CChannelImpl::ReceiveThread+0xf
047dfc10 7656344d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
047dfc1c 76f39802 kernel32!BaseThreadInitThunk+0xe
047dfc5c 76f397d5 ntdll!__RtlUserThreadStart+0x70
047dfc74 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0418e280 75e12f1a gdi32full!GetFontRealizationInfo+0x15
0418e2b0 75e12c9e gdi32full!GdiRealizationInfo+0x2a
0418e36c 75e11fef gdi32full!GetFaceAndSizeMetrics+0x5e
0418e470 75e193f4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x35
0418e818 75e177f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0418ec84 75e168ef gdi32full!ScriptStringAnalyse+0xa16
0418ee0c 75e16140 gdi32full!LpkCharsetDraw+0x60f
0418ee38 75c4adfd gdi32full!LpkDrawTextEx+0x30
0418ee94 75c4ac94 user32!DT_DrawStr+0x5f
0418eef4 75c4a7cb user32!DT_GetLineBreak+0xa2
0418efc4 75c4a5ce user32!DrawTextExWorker+0x1f9
0418efe0 6d81e6ea user32!DrawTextExW+0x1e
0418f044 6d81dd84 uxtheme!CTextDraw::GetTextExtent+0xa4
0418f08c 6d814349 uxtheme!GetThemeTextExtent+0x74
0418f0e0 6d820fa7 uxtheme!_GetNcCaptionTextSize+0x61
0418f1d4 6d82295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0418f280 6d822a0f uxtheme!_WindowPosChangedWorker+0x7c
0418f28c 6d81f565 uxtheme!OnOwpPostWindowPosChanged+0x1f
0418f2dc 75c55ea3 uxtheme!ThemePostWndProc+0x355
0418f3c4 75c55a7a user32!UserCallWinProcCheckWow+0x363
0418f428 75c5ce97 user32!DispatchClientMessage+0xea
0418f468 77564e4d user32!__fnINLPWINDOWPOS+0x37
0418f4b8 763a124c ntdll!KiUserCallbackDispatcher+0x4d
0418f4bc 6d83d4af win32u!NtUserSetWindowPos+0xc
0418f4e8 6d82010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0418f544 75c55e4f uxtheme!ThemePreWndProc+0x43f
0418f62c 75c53bea user32!UserCallWinProcCheckWow+0x30f
0418f6a0 75c539b0 user32!DispatchMessageWorker+0x22a
0418f6ac 60f5f5a1 user32!DispatchMessageW+0x10
0418f6d0 60f5f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0418f730 60f6196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0418f73c 60f7ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0418f778 753bfa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0418f788 77557a4e kernel32!BaseThreadInitThunk+0x19
0418f7e4 77557a1e ntdll!__RtlUserThreadStart+0x2f
0418f7f4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0039f688 0f4e605d CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x35
0039f6a0 0f4e605d CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
0039f6b8 0f500593 CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
0039f6dc 0f4ec4c3 CfgRelayEx!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x299
0039f708 0f4ec3a1 CfgRelayEx!<lambda_275893d493268fdec8709772e3fcec0e>::operator()+0x89
0039f73c 0f4ec3ef CfgRelayEx!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
0039f75c 0f4ec6c8 CfgRelayEx!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
0039f770 0f4ebc84 CfgRelayEx!_execute_onexit_table+0x17
0039f7a8 0f4ebe05 CfgRelayEx!common_exit+0xa1
0039f7b8 0f4cc619 CfgRelayEx!_cexit+0xb
0039f7ec 0f4cc4d1 CfgRelayEx!dllmain_crt_process_detach+0x39
0039f7f8 0f4cc721 CfgRelayEx!dllmain_crt_dispatch+0x4e
0039f838 0f4cc7bf CfgRelayEx!dllmain_dispatch+0xaf
0039f84c 76f99280 CfgRelayEx!_DllMainCRTStartup+0x1c
0039f86c 76fb8f88 ntdll!LdrpCallInitRoutine+0x14
0039f910 76fb8e2a ntdll!LdrShutdownProcess+0x1aa
0039f924 76a07a3c ntdll!RtlExitUserProcess+0x74
0039f938 00cc2612 kernel32!ExitProcessStub+0x12
0039f944 00cc25a7 srvhost!exit_or_terminate_process+0x40
0039f97c 00cc274d srvhost!common_exit+0xee
0039f990 00c916e0 srvhost!exit+0x11
0039f9d0 76a0343d srvhost!__scrt_common_main_seh+0x179
0039f9dc 76f99812 kernel32!BaseThreadInitThunk+0xe
0039fa1c 76f997e5 ntdll!__RtlUserThreadStart+0x70
0039fa34 00000000 ntdll!_RtlUserThreadStart+0x1b