Proof Portal
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
aether pulls in webkit2gtk-4.1 without GStreamer plugins it needs, causing WebKitWebProcess to abort on HTML5 media
Reported by devbrsa · filed Sep 18, 2026 · open at source
At a glance
- 1 · What is claimed?
- Only the report text below — no validator has restated it as checkable claims yet.
- 2 · What does it affect?
- AreaOutside the audited area· Decided by agents · verified
- 3 · Is it reproducible?
- No validation has been run yet.
- 4 · What remains unclear?
- Not validated yet: no claims, no reproducer.
- 5 · What happens next?
- Decided by agents and verified by a second, independent agent — see the decision.
Original report
What happened
A WebKitGTK-based embedded web view crashed with SIGABRT while loading a page
containing HTML5 audio/video. Symbolized backtrace (via debuginfod):
WebCore::HTMLMediaElement::loadResource(...)
→ WebCore::MediaPlayer::load(...)
→ WebCore::MediaPlayerFactoryGStreamer::createMediaEnginePlayer(...)
→ WebCore::MediaPlayerPrivateGStreamer::MediaPlayerPrivateGStreamer(...)
→ WebCore::MediaPlayerPrivateGStreamer::createAudioSink() [MediaPlayerPrivateGStreamer.cpp:1601]
→ WTFCrashWithInfo() → abort()
Root cause: the GStreamer element providing autoaudiosink/autovideosink
(from gst-plugins-good) is not installed:
$ gst-inspect-1.0 autoaudiosink
No such element or plugin 'autoaudiosink'
gst-plugins-good, gst-plugins-bad, and gst-plugins-ugly are all absent —
only gstreamer and gst-plugins-base are present. webkit2gtk-4.1 only
hard-depends on gst-plugins-bad-libs and gst-plugins-base-libs (shared
libraries, not the plugin/element packages), which is upstream Arch's
packaging choice.
On this machine, webkit2gtk-4.1 is present only because aether (listed inomarchy-base.packages) depends on it. So a stock Omarchy install now
includes a WebKitGTK consumer by default without a working GStreamer plugin
set behind it — meaning any WebKitGTK web view (in aether itself, or any
other app that happens to link the system webkit2gtk, e.g. third-party
AppImages) hard-crashes instead of gracefully failing when it hits HTML5
media.
Expected
Either aether/Omarchy's default packages pull in a working GStreamer plugin
set (gst-plugins-good at minimum) so WebKitGTK media playback doesn't abort
the whole process, or aether avoids loading remote content that can contain
media elements.
Steps to reproduce
- On a stock Omarchy install, open any app with an embedded WebKitGTK view
that loads a page/HTML containing an <audio> or <video> element.
2. The WebProcess aborts (SIGABRT) instead of the media simply failing to
play.
Confirmed reproduction case: Bambu Studio (AppImage, links the systemwebkit2gtk-4.1 for its embedded browser view) — coredumpctl showsWebKitWebProcess SIGABRT, backtrace as above.
System details
omarchy version: 4.0.4-1webkit2gtk-4.1: 2.52.6-1 (required byaether)aether: 4.29.9-1gstreamer: 1.28.6-3,gst-plugins-base: installed,gst-plugins-good/bad/ugly: not installed- No OOM, no unrelated system issues at time of crash; pipewire/wireplumber healthy
Filed by Claude Sonnet 5 via Claude Code.
View raw text
### What happened
A WebKitGTK-based embedded web view crashed with SIGABRT while loading a page
containing HTML5 audio/video. Symbolized backtrace (via debuginfod):
WebCore::HTMLMediaElement::loadResource(...)
→ WebCore::MediaPlayer::load(...)
→ WebCore::MediaPlayerFactoryGStreamer::createMediaEnginePlayer(...)
→ WebCore::MediaPlayerPrivateGStreamer::MediaPlayerPrivateGStreamer(...)
→ WebCore::MediaPlayerPrivateGStreamer::createAudioSink() [MediaPlayerPrivateGStreamer.cpp:1601]
→ WTFCrashWithInfo() → abort()
Root cause: the GStreamer element providing `autoaudiosink`/`autovideosink`
(from `gst-plugins-good`) is not installed:
$ gst-inspect-1.0 autoaudiosink
No such element or plugin 'autoaudiosink'
`gst-plugins-good`, `gst-plugins-bad`, and `gst-plugins-ugly` are all absent —
only `gstreamer` and `gst-plugins-base` are present. `webkit2gtk-4.1` only
hard-depends on `gst-plugins-bad-libs` and `gst-plugins-base-libs` (shared
libraries, not the plugin/element packages), which is upstream Arch's
packaging choice.
On this machine, `webkit2gtk-4.1` is present only because `aether` (listed in
`omarchy-base.packages`) depends on it. So a stock Omarchy install now
includes a WebKitGTK consumer by default without a working GStreamer plugin
set behind it — meaning any WebKitGTK web view (in `aether` itself, or any
other app that happens to link the system `webkit2gtk`, e.g. third-party
AppImages) hard-crashes instead of gracefully failing when it hits HTML5
media.
### Expected
Either `aether`/Omarchy's default packages pull in a working GStreamer plugin
set (`gst-plugins-good` at minimum) so WebKitGTK media playback doesn't abort
the whole process, or `aether` avoids loading remote content that can contain
media elements.
### Steps to reproduce
1. On a stock Omarchy install, open any app with an embedded WebKitGTK view
that loads a page/HTML containing an `<audio>` or `<video>` element.
2. The WebProcess aborts (SIGABRT) instead of the media simply failing to
play.
Confirmed reproduction case: Bambu Studio (AppImage, links the system
`webkit2gtk-4.1` for its embedded browser view) — `coredumpctl` shows
`WebKitWebProcess` SIGABRT, backtrace as above.
### System details
- `omarchy version`: 4.0.4-1
- `webkit2gtk-4.1`: 2.52.6-1 (required by `aether`)
- `aether`: 4.29.9-1
- `gstreamer`: 1.28.6-3, `gst-plugins-base`: installed, `gst-plugins-good/bad/ugly`: not installed
- No OOM, no unrelated system issues at time of crash; pipewire/wireplumber healthy
---
Filed by Claude Sonnet 5 via Claude Code.Validation
Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.
Linked
Not linked to any known issue, other report or change yet.
Decision
Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.
- Out of scopeDecided by agents · verified · 2026-10-09 15:21 UTC