{"id":49815,"date":"2025-10-28T14:39:34","date_gmt":"2025-10-28T18:39:34","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=49815"},"modified":"2025-10-28T14:39:34","modified_gmt":"2025-10-28T18:39:34","slug":"lg-spotlight-indexing-bug","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2025\/10\/28\/lg-spotlight-indexing-bug\/","title":{"rendered":"“LG” Spotlight Indexing Bug"},"content":{"rendered":"

Howard Oakley<\/a>:<\/p>\n

\n

There’s a bug in Spotlight that can prevent it from indexing any of the contents of susceptible text files. This has been present since macOS 13 Ventura if not before, and is still present in Tahoe 26.0.1.<\/p>\n

[…]<\/p>\n

To demonstrate this bug, all you need is a single UTF-8 plain text file, created by TextEdit or any other app capable of saving plain text. Start the text with the two characters L and G, both in capitals.<\/p>\n

[…]<\/p>\n

This isn’t the first bug in the RichText.mdimporter. In macOS Catalina 10.15.6, the same mdimporter (then build 319.60.100) introduced a bug that broke indexing<\/a> of Rich Text (RTF) files.<\/p>\n<\/blockquote>\n\n

Drew<\/a>:<\/p>\n

\n

The same thing happens for ‘HPA’. I suspect this might have something to do with the magic entry for Arhangel archive data (\/usr\/share\/file\/magic\/archive<\/tt>; see also HPA archive data), or something that is trying to make an equivalent check. Notice that ‘file’ reports such a text file as being ‘Arhangel archive data’.<\/p>\n<\/blockquote>\n\n

Like Oakley, I wouldn’t expect this to matter. Spotlight uses the file extension to determine the UTI (and therefore the importer), rather than using “magic” to look at the contents of the file. But it appears the problem is occurring after<\/em> that and that the importer itself is using “magic.”<\/p>\n\n

Howard Oakley<\/a>:<\/p>\n

What happens is that saving a text file starting with forbidden characters correctly triggers Spotlight’s indexing service. That identifies the file as having the UTI public.plain-text and hands it over for its contents to be indexed. But the indexer inspects those first few characters, decides it’s a different type of file altogether, and promptly returns an error 4864 for an NSCoderReadCorruptError without going any further.<\/p>

[…]<\/p>

It turns out that files starting with the characters Draw<\/code> were characteristic of a binary vector graphics format used by the !Draw app<\/a> for RISC OS 2 in 1989. Rather than believing the file’s UTI for one of the most common types of files in macOS, Spotlight’s indexer therefore decided that it was trying to import file data that must now be as rare as hens’ teeth, and wouldn’t go any further.<\/p><\/blockquote>\n\n

Previously:<\/p>\n