Capture CIS 17.4 Crashes on the latest Windows 11 Dev 25126.1

I update to Windows 11 Dev 25126.1 in recent days. After I updated, I've noticed that Capture CIS 17.4 can't be open. It'll crash when launched.

I've tried to re-install, update to the newest version. Neither of them work.

Fortunately, it generated the memory dump when crashed. I open this file in WinDBG, it shows that `cdn_og1210as64.dll` causes the bug. Stack overflow happened in function `XMLSerialize`.

The dump file was uploaded to WeTransfer(https://we.tl/t-sWfHyAcvQF).

Microsoft (R) Windows Debugger Version 10.0.25111.1000 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [Capture.exe.22648.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Deferred cache*symbol
Deferred srv*msdl.microsoft.com/.../symbols
Symbol search path is: srv*;cache*symbol;srv*msdl.microsoft.com/.../symbols
Executable search path is:
Windows 10 Version 25126 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
Edition build lab: 25126.1000.amd64fre.rs_prerelease.220521-1727
Machine Name:
Debug session time: Sun May 29 01:12:59.000 2022 (UTC + 8:00)
System Uptime: not available
Process Uptime: 0 days 0:00:47.000
................................................................
................................................................
................................................................
..............
Loading unloaded module list
..
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(5878.34f0): Security check failure or stack buffer overrun - code c0000409 (first/second chance not available)
Subcode: 0x2 FAST_FAIL_STACK_COOKIE_CHECK_FAILURE
For analysis of this file, run !analyze -v
cdn_og1210as64!CStringXMLCompatibleFTR::XMLSerialize+0x20b4:
00007ffc`dafab5e4 cd29 int 29h
0:000> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2249

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 222408

Key : Analysis.Init.CPU.mSec
Value: 1765

Key : Analysis.Init.Elapsed.mSec
Value: 20077

Key : Analysis.Memory.CommitPeak.Mb
Value: 143

Key : FailFast.Name
Value: STACK_COOKIE_CHECK_FAILURE

Key : FailFast.Type
Value: 2

Key : Timeline.Process.Start.DeltaSec
Value: 47

Key : WER.OS.Branch
Value: rs_prerelease

Key : WER.OS.Timestamp
Value: 2022-05-21T17:27:00Z

Key : WER.OS.Version
Value: 10.0.25126.1000

Key : WER.Process.Version
Value: 17.4.0.0

FILE_IN_CAB: Capture.exe.22648.dmp

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

CONTEXT: (.ecxr)
rax=0000000000000001 rbx=000000c1babfc11c rcx=0000000000000002
rdx=000000c1babfc0d9 rsi=000000c1babfc080 rdi=000000000000003d
rip=00007ffcdafab5e4 rsp=000000c1babfbf30 rbp=000000c1babfc09c
r8=000000000000003d r9=8101010101010100 r10=810100fefef900f8
r11=000000c1babfcdc0 r12=000000c1babfc190 r13=000000c1babfcdc0
r14=000000c1babfc5b0 r15=0000000000000002
iopl=0 nv up ei pl nz na pe nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
cdn_og1210as64!CStringXMLCompatibleFTR::XMLSerialize+0x20b4:
00007ffc`dafab5e4 cd29 int 29h
Resetting default scope

EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ffcdafab5e4 (cdn_og1210as64!CStringXMLCompatibleFTR::XMLSerialize+0x00000000000020b4)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000002
Subcode: 0x2 FAST_FAIL_STACK_COOKIE_CHECK_FAILURE

PROCESS_NAME: Capture.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>

EXCEPTION_CODE_STR: c0000409

EXCEPTION_PARAMETER1: 0000000000000002

FAULTING_THREAD: 000034f0

STACK_TEXT:
000000c1`babfbf30 00007ffc`daf81812 : 0000f580`d12b0370 000000c1`babfc09c 000000c1`babfc080 000000c1`babfc11c : cdn_og1210as64!CStringXMLCompatibleFTR::XMLSerialize+0x20b4
000000c1`babfbf70 00007ffd`83d3ac3e : 00000230`9839e32c 00000230`9839e32c 00000000`00007000 00000000`00000000 : cdn_og1210as64!CGXFont::WriteProfile+0x2b6
000000c1`babfc050 00007ffd`83d39941 : 00000000`00000000 00000230`985f13e0 000000c1`babfc4c0 000000c1`babf0000 : gdi32full!iAnsiCallback+0xb0
000000c1`babfc3b0 00007ffd`83d51841 : 00000000`3901120b 00000000`00000000 00007ffc`daf8171c 00007ffc`daf8171c : gdi32full!EnumFontsInternalW+0x76d9
000000c1`babfc430 00007ffd`83d3a782 : 000000c1`babfc5b0 00000000`3901120b 000000c1`babfc570 00000000`004a0048 : gdi32full!EnumFontsInternalA+0xc5
000000c1`babfc490 00007ffd`8553d9f0 : 00000230`997b06e0 00007ffd`83d4d8e1 00000000`00000000 00007ffd`83e7c594 : gdi32full!EnumFontFamiliesExA+0x42
000000c1`babfc4d0 00007ffc`daf7fcf1 : 00000000`00000000 000000c1`babfc620 00000000`00000001 00000804`00000001 : gdi32!EnumFontFamiliesExAStub+0x50
000000c1`babfc520 00007ffc`dae57ed3 : 00000230`997b03f0 00000230`997b0070 00000000`00000001 00007ffc`db0dbae0 : cdn_og1210as64!GX_FONT_STATE::GX_FONT_STATE+0x119
000000c1`babfce20 00007ffc`dae58745 : 00000230`997b0070 00000230`997b06a8 000000c1`babfcee0 00000000`00000000 : cdn_og1210as64!CGXLangDll::CGXLangDll+0x87
000000c1`babfce60 00007ffc`dae586d3 : 00000000`00000001 00007ffc`d961d7a5 ffffffff`fffffffe 00000230`997b0070 : cdn_og1210as64!GXGetResourceHandle+0xb9
000000c1`babfceb0 00007ffc`daea0747 : 00000000`00000000 00000230`9a782f70 00000000`00000000 00000000`00000e00 : cdn_og1210as64!GXGetResourceHandle+0x47
000000c1`babfcee0 00007ff6`e5b0fcbc : 00007ff6`e65f8ca0 00007ff6`e5660000 00007ff6`e5660000 00000000`00000001 : cdn_og1210as64!GXInit+0x2f
000000c1`babfcf20 00007ffc`d9841744 : 00000000`00003a43 00000230`00000000 00000230`00000001 00000230`99328be8 : Capture!Capture_Init+0x10786c
000000c1`babff900 00007ff6`e5d9daf3 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : mfc140!AfxWinMain+0x84
000000c1`babff940 00007ffd`8440244d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : Capture!COrSrcFrameWnd::CanShowOnTaskBarTabs+0x19dd63
000000c1`babff980 00007ffd`8642adf8 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x1d
000000c1`babff9b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x28

STACK_COMMAND: ~0s ; .cxr ; kb

SYMBOL_NAME: cdn_og1210as64+20b4

MODULE_NAME: cdn_og1210as64

IMAGE_NAME: cdn_og1210as64.dll

FAILURE_BUCKET_ID: FAIL_FAST_STACK_BUFFER_OVERRUN_STACK_COOKIE_CHECK_FAILURE_MISSING_GSFRAME_c0000409_cdn_og1210as64.dll!Unknown

OS_VERSION: 10.0.25126.1000

BUILDLAB_STR: rs_prerelease

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

IMAGE_VERSION: 12.1.0.0

FAILURE_ID_HASH: {328d5b57-589f-1537-edbc-60950f96d99f}

Followup: MachineOwner
---------

0:000> lmvm cdn_og1210as64
Browse full module list
start end module name
00007ffc`dae50000 00007ffc`db10d000 cdn_og1210as64 (export symbols) cdn_og1210as64.dll
Loaded symbol image file: cdn_og1210as64.dll
Mapped memory image file: Cadence\SPB_17.4\tools\bin\cdn_og1210as64.dll
Image path: Cadence\SPB_17.4\tools\bin\cdn_og1210as64.dll
Image name: cdn_og1210as64.dll
Browse all global symbols functions data
Timestamp: Mon Aug 6 21:27:53 2018 (5B684CD9)
CheckSum: 002C0B70
ImageSize: 002BD000
File version: 12.1.0.0
Product version: 12.1.0.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04e4
Information from resource tables:
CompanyName: Rogue Wave Software
ProductName: Objective Grid
InternalName: GXDLLR
OriginalFilename: GX"1210"R.DLL
ProductVersion: 12.1.0
FileVersion: 12.1.0
FileDescription: ObjGrid DLL Shared Library - Release Version
LegalCopyright: Copyright (c) 1997-2015 Rogue Wave Software, Inc. All Rights Reserved.