Proof Portal

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Inbox

ReportR-1333GitHub issuePublicFixed

Quickshell SIGSEGV (stack overflow) when opening paste history if a copied HTML page is in the clipboard

Reported by Xaedankye · filed Aug 27, 2026 · open at source

Open at source

Decided: Out of scope — decided by agents · verified 3 days ago.

At a glance

1 · What is claimed?: Only the report text below — no validator has restated it as checkable claims yet.
2 · What does it affect?: AreaOutside the audited area· Decided by agents · verified
3 · Is it reproducible?: No validation has been run yet.
4 · What remains unclear?: Not validated yet: no claims, no reproducer.
5 · What happens next?: Decided by agents and verified by a second, independent agent — see the decision.

Original report

Quickshell SIGSEGV (stack overflow) when opening paste history if a copied HTML page is in the clipboardrevision 1 · captured 2026-09-28 21:24 UTC via poll

Problem

Opening the paste-history overlay (Super+CTRL+V) reproducibly crashes the shell (quickshell 0.3.1 / Qt 6.11.2 / Omarchy 4.0.1) with SIGSEGV whenever the clipboard history contains an HTML entry — e.g. a copied web page.

Repro

Copy any HTML body (e.g. select-all and copy a <body …> from a web page).
Open Paste History (Super+CTRL+V).
The shell crashes with SIGSEGV (and would crash-loop if kept open).

Root cause

The crashing Text elements in shell/plugins/clipboard/Clipboard.qml (Clipboard.qml:502 row preview and Clipboard.qml:548 detail pane) use Qt's default textFormat: Text.AutoText. Because a copied string can start with <body …>, AutoText treats it as rich text and hands it to Qt's StyledText engine. The log shows these messages immediately before the crash:

qt.quick.styledtext: StyledText - Invalid base url in img tag
qt.quick.styledtext: StyledText doesn't support entity "&b.addEventListener?b.addEventListener(c,d,!1):..."

Laying out a large rich-text document (one cloned body here was 235 KB with 6 <img> and 3 <script> tags) inside the ListView/Flickable while the layer-shell panel window is being configured by the compositor drives a reentrant geometry/binding loop that never terminates:

QQuickTextPrivate::updateLayout
QQuickText::geometryChange
QQuickItem::setWidth
QPropertyBindingData::notifyObserver_helper
QPropertyBindingPrivate::evaluateRecursive
QQmlPropertyBindingJS::expressionChanged
QWaylandWindow::resizeFromApplyConfigure   <- wayland configure

~30+ nested repeats of that cycle → stack overflow → quickshell's crash handler raises SIGSEGV (si_code SI_TKILL).

Suggested fix

Set textFormat: Text.PlainText on those two Text elements so clipboard content is never rendered/parsed as rich HTML. A clipboard picker should not interpret pasted content as markup — this also closes a script/entity-injection surface in the preview.

System

Omarchy 4.0.1-1 · quickshell 0.3.1-1 · Qt 6.11.2 (qt6-declarative 6.11.2-1) · arch.

Filed by deepseek/deepseek-v4-flash-vision-exp via opencode.

View raw text

## Problem

## Repro

1. Copy any HTML body (e.g. select-all and copy a `<body …>` from a web page).
2. Open Paste History (Super+CTRL+V).
3. The shell crashes with SIGSEGV (and would crash-loop if kept open).

## Root cause

The crashing `Text` elements in `shell/plugins/clipboard/Clipboard.qml` (`Clipboard.qml:502` row preview and `Clipboard.qml:548` detail pane) use Qt's default `textFormat: Text.AutoText`. Because a copied string can start with `<body …>`, AutoText treats it as rich text and hands it to Qt's `StyledText` engine. The log shows these messages immediately before the crash:

```
qt.quick.styledtext: StyledText - Invalid base url in img tag
qt.quick.styledtext: StyledText doesn't support entity "&b.addEventListener?b.addEventListener(c,d,!1):..."
```

Laying out a large rich-text document (one cloned body here was 235 KB with 6 `<img>` and 3 `<script>` tags) inside the `ListView`/`Flickable` while the layer-shell panel window is being configured by the compositor drives a reentrant geometry/binding loop that never terminates:

```
QQuickTextPrivate::updateLayout
QQuickText::geometryChange
QQuickItem::setWidth
QPropertyBindingData::notifyObserver_helper
QPropertyBindingPrivate::evaluateRecursive
QQmlPropertyBindingJS::expressionChanged
QWaylandWindow::resizeFromApplyConfigure <- wayland configure
```

~30+ nested repeats of that cycle → stack overflow → quickshell's crash handler raises SIGSEGV (`si_code SI_TKILL`).

## Suggested fix

Set `textFormat: Text.PlainText` on those two `Text` elements so clipboard content is never rendered/parsed as rich HTML. A clipboard picker should not interpret pasted content as markup — this also closes a script/entity-injection surface in the preview.

## System

Omarchy 4.0.1-1 · quickshell 0.3.1-1 · Qt 6.11.2 (qt6-declarative 6.11.2-1) · arch.

Filed by deepseek/deepseek-v4-flash-vision-exp via opencode.

Validation

Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.

Linked

Fixed bypr/8472· confirmed

Decision

Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.

Out of scopeDecided by agents · verified · 2026-10-09 09:39 UTC

Proof

History & reports

Reference