The MARC Search service can crash when indexing certain .PPT files

Versions / Builds Affected

20140616

Status

Resolved

Problem Summary

The MARC Search service can crash when indexing certain .PPT files

TT / JIRAID

2636

How to Identify

The event logs shows a of marc.search.exe with a reference to ntdll.dll. The following is from build: Log Name: Application Source: Application Error Event ID: 1000 Level: Error Faulting application name: MArc.Search.exe, version: 20140.626.100.14, time stamp: 0x53ac1538 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e Exception code: 0xc00000fd Fault offset: 0x0000000000054f4a Faulting process id: 0xfb8 Faulting application start time: 0x01cfdbea209b018d Faulting application path: C:\Program Files\GFI\MailArchiver\Search\bin\MArc.Search.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: 3459e6ba-4938-11e4-bec7-000c29df699e This is caused by the dtSearch engine while trying to index certain .PPT files. Notes - The email triggering this in the original case in which this was reported was a PPT file created in 1998 (and therefore with a very old version of Powerpoint) - Not all PPT files cause a crash

Workaround / Fix Details

FIX Fixed in GFI Archiver 2015 build 20141117 ----- Workaround #1 Pause the index which contains the email which triggers the crash Workaround #2 Disable indexing of PPT attachments (or attachment indexing in full) Workaround #3 Delete the email in question from the archive

Required Actions

Upgrade to GFI Archiver 2015 build 20141117 or newer