Versions / Builds Affected20130510
Problem SummaryWhen the Search service processes a specific "problematic" attachment of an email it can result in a memory leak and in turn the marc.search.exe process (Search service) crashes.
TT / JIRAID1433
How to IdentifyThis situation is not easy to identify. A first indication would be:
1. Observe the process marc.search.exe in task manager
2. You will see its memory allocation grow continuously until the process crashes
Let above happen a few times after each other and check the Search debug logs each time. If you see that the very last email before the crash was the very same one this would be a strong indication for this issue.
Check these logs for above:
Each time ..\Search\DebugLogs\IndexableAttachment.log would end with the very same file - e.g.:
2013-06-03,12:32:13,454,1,"#00000DD4","#0000000A","info ","IndexableAttachment","Converted A01035.pdf at depth 0"
Each time ..\Search\DebugLogs\NewMessageCollection.log would end with the very same email - e.g.:
2013-06-03,12:32:14,422,1,"#00000DD4","#0000000A","info ","NewMessageCollection","Indexed: DocId , MessageId: [-2147483588]"
The attachments we have seen triggering this were PDF files. They did open normally, but when trying to open their properties (File > Properties) within Adobe Reader the property dialog simply did not open.
Workaround / Fix DetailsFixed in build 20130704.
Required ActionsUpgrade to 20130704 or newer.