textinputframework.dll crash

Question

STACK_TEXT:

014fe660 764eddb9 10000675 00000000 00000000 ntdll!NtRaiseHardError+0xc

014fe9c4 716327cd 014fe9e0 00000000 00000000 KERNELBASE!RaiseFailFastException+0xf9

014fea3c 71672bd3 00000052 cc594d34 0214e198 textinputframework!FailFastWithHR+0x68

014fea7c 7160b8f4 014feabc 80004005 7160b8b0 textinputframework!CAsyncTaskScheduler::DeferCurrentTask+0x672b0

014fea9c 71662e2f 0214e198 00000136 014feabc textinputframework!CTextInputClientFreeThread::DeferCurrentOperation+0x44

014feac8 71660928 0847ae88 00000000 cc594c40 textinputframework!CInputContextAdapter::_ExecuteOperation+0x175

014feb08 7160c132 084761c8 014feb28 cc594c18 textinputframework!CInputContextAdapter::GetSelection+0x48

014feb50 7160be73 014feb74 00000001 cc594ccc textinputframework!CTextInputClientOwnerAsync::GetSelectionAsync+0xa6

014feb84 7161debe 084b6750 0847ab78 7161da60 textinputframework!TextInputClient::PopulateEditControl+0x2d

014febec 7163a0aa 08475c0c 00000000 0847b128 textinputframework!TextInputClient::EditControlRegister+0x45e

014fec08 7161ec11 08476250 7161e850 084812e0 textinputframework!<lambda_43846dddb7775382dd6d55d1be8f37d8>::operator()+0x36

014fec78 71663020 0214e198 084761c8 08476200 textinputframework!CTextInputClientFreeThread::EditControlRegister+0x3c1

014fed00 716612f2 cc594a7c 08470648 71661270 textinputframework!CInputContextAdapter::_Register+0x4c

014fed34 7164d7ff 084761dc 00000001 00000000 textinputframework!CInputContextAdapter::OnFocusChange+0x82

014fed6c 71649081 00000001 00000000 014fedd8 textinputframework!CInputContext::OnFocusChange+0xbd

014fed7c 77402c53 08470548 00000001 0c53b759 textinputframework!CDocumentInputManager::OnFocusChange+0x21

014fedd8 773dd9ce 08470548 00000001 07123e58 msctf!CThreadInputMgr::_SetFocus+0x2b6

014fee38 773dd615 80000002 00ca19ac 07123e58 msctf!CThreadInputMgr::OnInputFocusEvent+0x38e

014fee94 773dc852 80000002 00ca19ac 08040804 msctf!CThreadInputMgr::OnCiceroEvent+0x145

014feef4 75691919 b1110c0f 80000002 00ca19ac msctf!WinEventProc+0xf2

014fef38 77644e9d 014fef54 00000020 014ff044 user32!__ClientCallWinEventProc+0x39

014fef70 7624107c 756886ff 00ca19ac 00000006 ntdll!KiUserCallbackDispatcher+0x4d

014fef74 756886ff 00ca19ac 00000006 00000001 win32u!NtUserMessageCall+0xc

014ff008 75688498 026cb940 00000000 0014165e user32!RealDefWindowProcWorker+0x1e0

014ff054 7569339b 00ca19ac 00000006 00000001 user32!DefWindowProcW+0x108

014ff080 7568a33a 77657d50 00ca19ac 00000006 user32!_InternalCallWinProc+0x2b

014ff164 75689a07 77657d50 00000000 00000006 user32!UserCallWinProcCheckWow+0x33a

014ff19c 75687bab 00000006 00000001 0014165e user32!CallWindowProcAorW+0x7f

014ff1b4 681c8f98 77657d50 00ca19ac 00000006 user32!CallWindowProcW+0x1b

WARNING: Stack unwind information not available. Following frames may be wrong.

014ff1d0 681c4486 00000006 00000001 0014165e DuiLib+0xa8f98

014ff1f4 004b77a3 00000000 00000001 0014165e DuiLib+0xa4486

014ff210 681c9913 00000006 00000001 0014165e PddWorkbench+0x2e77a3

014ff230 7569339b 00ca19ac 00000006 00000001 DuiLib+0xa9913

014ff25c 7568a33a 681c98d0 00ca19ac 00000006 user32!_InternalCallWinProc+0x2b

014ff340 75689f2a 681c98d0 00000000 00000006 user32!UserCallWinProcCheckWow+0x33a

014ff3a4 7568daff 026cb940 00000000 00000006 user32!DispatchClientMessage+0xea

014ff3e0 77644e9d 014ff3fc 00000020 014ff490 user32!__fnDWORD+0x3f

014ff418 7624157c 681c96a4 00ca19ac 00000001 ntdll!KiUserCallbackDispatcher+0x4d

014ff41c 681c96a4 00ca19ac 00000001 0f271d88 win32u!NtUserShowWindow+0xc

014ff430 004b803d 00000001 00000001 02808a5c DuiLib+0xa96a4

014ff49c 1a950000 00000206 11b6438c 0075880c PddWorkbench+0x2e803d

014ff56c 0052b9ba 11b64388 0075880c 014ff614 0x1a950000

014ff57c 004b7ef2 014ff594 00000000 028088d4 PddWorkbench+0x35b9ba

014ff614 004b894a 000005dc 014ff634 028088a0 PddWorkbench+0x2e7ef2

014ff660 0047741f 00000003 20d5b7f4 000005dc PddWorkbench+0x2e894a

014ff764 0047638c 20d5b7b8 00000000 028087c8 PddWorkbench+0x2a741f

014ff908 00539734 8fccc863 00000cba 00539734 PddWorkbench+0x2a638c

014ff954 7569339b 020a0cde 00000cba 20d5b7b8 PddWorkbench+0x369734

014ff980 7568a33a 00539680 020a0cde 00000cba user32!_InternalCallWinProc+0x2b

014ffa64 7568809a 00539680 00000000 00000cba user32!UserCallWinProcCheckWow+0x33a

014ffad8 75687e60 1bdcce3d 014ffb18 681df48f user32!DispatchMessageWorker+0x22a

014ffae4 681df48f 014ffafc 2f812a6c 75692ba0 user32!DispatchMessageW+0x10

014ffb18 001daf62 00000000 0000000a 00000044 DuiLib+0xbf48f

014ffb5c 0056e7e4 001d0000 00000000 01ba1ece PddWorkbench+0xaf62

014ffba8 7557fa29 013c8000 7557fa10 014ffc14 PddWorkbench+0x39e7e4

014ffbb8 77637a9e 013c8000 cedb1089 00000000 kernel32!BaseThreadInitThunk+0x19

014ffc14 77637a6e ffffffff 77658a39 00000000 ntdll!__RtlUserThreadStart+0x2f

014ffc24 00000000 00b3bc9f 013c8000 00000000 ntdll!_RtlUserThreadStart+0x1b

Answer 1

why task list empty, only task list empty, then [ebp - 14] == 0

Answer 2

will the task list is empty, begin() return task * == 0,

comptr<task> temp = begin(); then temp is null

test esi,esi ;then jmp to the 52 error

class CAsyncTaskScheduler{

dd unk1

dd unk2

dd unk3

dd unk4

dd unk5

dd unk6

dd unk7

list<comptr<task>>

}

so why task list empty, when async schedu the task