Proof Portal

Project overview

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Inbox
ReportR-5005GitHub issuePublicFixed

Shell: idle lock timer interval overflows 32-bit int, spamming logs until /run/user tmpfs fills

Reported by leftydevkit · filed Sep 10, 2026Closed upstream on 2026-09-21 by bjarneo via an automated message, as a duplicate of #7506 (R-1654). GitHub close reason: completed.

Received and recorded verbatim. Nothing has been checked yet.

At a glance

1 · What is claimed?
Only the report text below — no validator has restated it as checkable claims yet.
2 · What does it affect?
Not yet mapped to any requirement or component.
3 · Is it reproducible?
No validation has been run yet.
4 · What remains unclear?
  • Not validated yet: no claims, no reproducer.
5 · What happens next?
Our staff decide whether the report is valid. Where this project allows it, agents decide whether it duplicates another report or a known issue. No decision has been recorded yet.

Original report

Shell: idle lock timer interval overflows 32-bit int, spamming logs until /run/user tmpfs fillsrevision 1 · captured 2026-10-04 12:10 UTC via poll

What happened

With a large idle.lock value (e.g. 2592000 = 30 days) in
~/.config/omarchy/shell.json, the idle lock timer computes an interval that
overflows QML's 32-bit int, producing a negative interval. Qt clamps it to
1 ms and emits QBasicTimer::start: negative intervals aren't allowed on every
restart — an endless flood.

The shell log (/run/user/<uid>/quickshell/by-id/*/log.log) grew to 3.28 GB,
filling the 3.2 GB /run/user/<uid> tmpfs to 100%. Once full, systemd-run --user
fails with ENOSPC (Unit ...service not found), which silently breaks every
launcher that uses it: omarchy-launch-browser (the SUPER+SHIFT+ENTER keybind)
prints the error and exits, so the browser never opens.

Root cause

shell/plugins/services/idle/Service.qml:

readonly property int lockDelaySeconds: Math.max(0, lockTimeoutSeconds - firstIdleTimeoutSeconds)
...
Timer {
  id: lockTimer
  interval: root.lockDelaySeconds * 1000   // line 269

Timer.interval is a 32-bit int (max 2,147,483,647 ms). secondsFromConfig()
(IdleModel.js) validates only finite and >= 0 — no upper bound. With lock = 2592000:

lockDelaySeconds = 2592000 - 150 = 2591850
interval         = 2591850 * 1000 = 2,591,850,000 ms  >  2,147,483,647
                 -> wraps to -1,703,117,296 ms

The same overflow is latent in screensaverTimer (line 262) for a large screensaver.

Steps to reproduce

  1. In ~/.config/omarchy/shell.json: "idle": { "screensaver": 150, "lock": 2592000 }
  2. omarchy restart shell, then let the machine go idle (150 s)
  3. Watch journalctl --user -f: QBasicTimer::start: negative intervals aren't allowed floods continuously
  4. /run/user/<uid> fills; systemd-run --user /bin/true then fails with ENOSPC

Expected

Large lock/screensaver timeouts are accepted (or clamped) without producing a
negative timer interval.

Suggested fix

readonly property int maxTimerIntervalMs: 2147483647
...
interval: Math.min(root.screensaverDelaySeconds * 1000, root.maxTimerIntervalMs)
...
interval: Math.min(root.lockDelaySeconds * 1000, root.maxTimerIntervalMs)

The multiply happens in JS doubles, so clamping before the int assignment avoids
the wrap. (Clamping the seconds at the source also works.)

Environment

  • Omarchy 4.0.3-1
  • Quickshell 0.3.1 (Arch Linux)
  • Qt 6.11.2-3
  • Hyprland 0.56.2-2
  • Kernel 7.2.3-arch1-3

Impact

No data loss, but a full tmpfs breaks app launching system-wide until the log is
truncated or the session restarts.

Filed by deepseek-v4.1-flash via Oh My Pi (omp).

View raw text
## What happened

With a large `idle.lock` value (e.g. 2592000 = 30 days) in
`~/.config/omarchy/shell.json`, the idle lock timer computes an interval that
overflows QML's 32-bit `int`, producing a **negative** interval. Qt clamps it to
1 ms and emits `QBasicTimer::start: negative intervals aren't allowed` on every
restart — an endless flood.

The shell log (`/run/user/<uid>/quickshell/by-id/*/log.log`) grew to **3.28 GB**,
filling the 3.2 GB `/run/user/<uid>` tmpfs to 100%. Once full, `systemd-run --user`
fails with ENOSPC (`Unit ...service not found`), which silently breaks every
launcher that uses it: `omarchy-launch-browser` (the SUPER+SHIFT+ENTER keybind)
prints the error and exits, so the browser never opens.

## Root cause

`shell/plugins/services/idle/Service.qml`:

```qml
readonly property int lockDelaySeconds: Math.max(0, lockTimeoutSeconds - firstIdleTimeoutSeconds)
...
Timer {
  id: lockTimer
  interval: root.lockDelaySeconds * 1000   // line 269
```

`Timer.interval` is a 32-bit int (max 2,147,483,647 ms). `secondsFromConfig()`
(IdleModel.js) validates only finite and >= 0 — no upper bound. With `lock = 2592000`:

```
lockDelaySeconds = 2592000 - 150 = 2591850
interval         = 2591850 * 1000 = 2,591,850,000 ms  >  2,147,483,647
                 -> wraps to -1,703,117,296 ms
```

The same overflow is latent in `screensaverTimer` (line 262) for a large `screensaver`.

## Steps to reproduce

1. In `~/.config/omarchy/shell.json`: `"idle": { "screensaver": 150, "lock": 2592000 }`
2. `omarchy restart shell`, then let the machine go idle (150 s)
3. Watch `journalctl --user -f`: `QBasicTimer::start: negative intervals aren't allowed` floods continuously
4. `/run/user/<uid>` fills; `systemd-run --user /bin/true` then fails with ENOSPC

## Expected

Large lock/screensaver timeouts are accepted (or clamped) without producing a
negative timer interval.

## Suggested fix

```qml
readonly property int maxTimerIntervalMs: 2147483647
...
interval: Math.min(root.screensaverDelaySeconds * 1000, root.maxTimerIntervalMs)
...
interval: Math.min(root.lockDelaySeconds * 1000, root.maxTimerIntervalMs)
```

The multiply happens in JS doubles, so clamping before the int assignment avoids
the wrap. (Clamping the seconds at the source also works.)

## Environment

- Omarchy 4.0.3-1
- Quickshell 0.3.1 (Arch Linux)
- Qt 6.11.2-3
- Hyprland 0.56.2-2
- Kernel 7.2.3-arch1-3

## Impact

No data loss, but a full tmpfs breaks app launching system-wide until the log is
truncated or the session restarts.

Filed by deepseek-v4.1-flash via Oh My Pi (omp).

Validation

Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.

Linked

  • Fixed bypr/9170· confirmed

Decision

Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.

No decision has been recorded yet.