Overview

When the Search service processes a specific "problematic" attachment of an email, it can result in a memory leak and in turn, the marc.search.exe process (Search service) crashes.

These are the steps to identify the situation:

1. Observe the process marc.search.exe in task manager. You will see its memory allocation grow continuously until the process crashes.
2. Let above happen a few times after each other and check the Search debug logs each time.
3. If you see that the very last email before the crash was the very same one this would be a strong indication for this issue.

Check these logs for above:

• Every time ..\Search\DebugLogs\IndexableAttachment.log would end with the very same file, e.g.:
  2013-06-03,12:32:13,454,1,"#00000DD4","#0000000A","info ","IndexableAttachment","Converted A01035.pdf at depth 0"
• Every time ..\Search\DebugLogs\NewMessageCollection.log ends with the very same email - e.g.:
  2013-06-03,12:32:14,422,1,"#00000DD4","#0000000A","info ","NewMessageCollection","Indexed: DocId [61], MessageId: [-2147483588]"

The attachments we have seen triggering this were PDF files. They did open normally, but when trying to open their properties (File > Properties) within Adobe Reader, the property dialog simply did not open.

Environment

20130510

Resolution 

Upgrade to version 20130704 or newer.