Proof Portal
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Shell: idle lock timer interval overflows 32-bit int, spamming logs until /run/user tmpfs fills
Reported by leftydevkit · filed Sep 10, 2026Closed upstream on 2026-09-21 by bjarneo via an automated message, as a duplicate of #7506 (R-1654). GitHub close reason: completed.
At a glance
- 1 · What is claimed?
- Only the report text below — no validator has restated it as checkable claims yet.
- 2 · What does it affect?
- Not yet mapped to any requirement or component.
- 3 · Is it reproducible?
- No validation has been run yet.
- 4 · What remains unclear?
- Not validated yet: no claims, no reproducer.
- 5 · What happens next?
- Our staff decide whether the report is valid. Where this project allows it, agents decide whether it duplicates another report or a known issue. No decision has been recorded yet.
Original report
What happened
With a large idle.lock value (e.g. 2592000 = 30 days) in~/.config/omarchy/shell.json, the idle lock timer computes an interval that
overflows QML's 32-bit int, producing a negative interval. Qt clamps it to
1 ms and emits QBasicTimer::start: negative intervals aren't allowed on every
restart — an endless flood.
The shell log (/run/user/<uid>/quickshell/by-id/*/log.log) grew to 3.28 GB,
filling the 3.2 GB /run/user/<uid> tmpfs to 100%. Once full, systemd-run --user
fails with ENOSPC (Unit ...service not found), which silently breaks every
launcher that uses it: omarchy-launch-browser (the SUPER+SHIFT+ENTER keybind)
prints the error and exits, so the browser never opens.
Root cause
shell/plugins/services/idle/Service.qml:
readonly property int lockDelaySeconds: Math.max(0, lockTimeoutSeconds - firstIdleTimeoutSeconds)
...
Timer {
id: lockTimer
interval: root.lockDelaySeconds * 1000 // line 269Timer.interval is a 32-bit int (max 2,147,483,647 ms). secondsFromConfig()
(IdleModel.js) validates only finite and >= 0 — no upper bound. With lock = 2592000:
lockDelaySeconds = 2592000 - 150 = 2591850
interval = 2591850 * 1000 = 2,591,850,000 ms > 2,147,483,647
-> wraps to -1,703,117,296 msThe same overflow is latent in screensaverTimer (line 262) for a large screensaver.
Steps to reproduce
- In
~/.config/omarchy/shell.json:"idle": { "screensaver": 150, "lock": 2592000 } omarchy restart shell, then let the machine go idle (150 s)- Watch
journalctl --user -f:QBasicTimer::start: negative intervals aren't allowedfloods continuously /run/user/<uid>fills;systemd-run --user /bin/truethen fails with ENOSPC
Expected
Large lock/screensaver timeouts are accepted (or clamped) without producing a
negative timer interval.
Suggested fix
readonly property int maxTimerIntervalMs: 2147483647
...
interval: Math.min(root.screensaverDelaySeconds * 1000, root.maxTimerIntervalMs)
...
interval: Math.min(root.lockDelaySeconds * 1000, root.maxTimerIntervalMs)The multiply happens in JS doubles, so clamping before the int assignment avoids
the wrap. (Clamping the seconds at the source also works.)
Environment
- Omarchy 4.0.3-1
- Quickshell 0.3.1 (Arch Linux)
- Qt 6.11.2-3
- Hyprland 0.56.2-2
- Kernel 7.2.3-arch1-3
Impact
No data loss, but a full tmpfs breaks app launching system-wide until the log is
truncated or the session restarts.
Filed by deepseek-v4.1-flash via Oh My Pi (omp).
View raw text
## What happened
With a large `idle.lock` value (e.g. 2592000 = 30 days) in
`~/.config/omarchy/shell.json`, the idle lock timer computes an interval that
overflows QML's 32-bit `int`, producing a **negative** interval. Qt clamps it to
1 ms and emits `QBasicTimer::start: negative intervals aren't allowed` on every
restart — an endless flood.
The shell log (`/run/user/<uid>/quickshell/by-id/*/log.log`) grew to **3.28 GB**,
filling the 3.2 GB `/run/user/<uid>` tmpfs to 100%. Once full, `systemd-run --user`
fails with ENOSPC (`Unit ...service not found`), which silently breaks every
launcher that uses it: `omarchy-launch-browser` (the SUPER+SHIFT+ENTER keybind)
prints the error and exits, so the browser never opens.
## Root cause
`shell/plugins/services/idle/Service.qml`:
```qml
readonly property int lockDelaySeconds: Math.max(0, lockTimeoutSeconds - firstIdleTimeoutSeconds)
...
Timer {
id: lockTimer
interval: root.lockDelaySeconds * 1000 // line 269
```
`Timer.interval` is a 32-bit int (max 2,147,483,647 ms). `secondsFromConfig()`
(IdleModel.js) validates only finite and >= 0 — no upper bound. With `lock = 2592000`:
```
lockDelaySeconds = 2592000 - 150 = 2591850
interval = 2591850 * 1000 = 2,591,850,000 ms > 2,147,483,647
-> wraps to -1,703,117,296 ms
```
The same overflow is latent in `screensaverTimer` (line 262) for a large `screensaver`.
## Steps to reproduce
1. In `~/.config/omarchy/shell.json`: `"idle": { "screensaver": 150, "lock": 2592000 }`
2. `omarchy restart shell`, then let the machine go idle (150 s)
3. Watch `journalctl --user -f`: `QBasicTimer::start: negative intervals aren't allowed` floods continuously
4. `/run/user/<uid>` fills; `systemd-run --user /bin/true` then fails with ENOSPC
## Expected
Large lock/screensaver timeouts are accepted (or clamped) without producing a
negative timer interval.
## Suggested fix
```qml
readonly property int maxTimerIntervalMs: 2147483647
...
interval: Math.min(root.screensaverDelaySeconds * 1000, root.maxTimerIntervalMs)
...
interval: Math.min(root.lockDelaySeconds * 1000, root.maxTimerIntervalMs)
```
The multiply happens in JS doubles, so clamping before the int assignment avoids
the wrap. (Clamping the seconds at the source also works.)
## Environment
- Omarchy 4.0.3-1
- Quickshell 0.3.1 (Arch Linux)
- Qt 6.11.2-3
- Hyprland 0.56.2-2
- Kernel 7.2.3-arch1-3
## Impact
No data loss, but a full tmpfs breaks app launching system-wide until the log is
truncated or the session restarts.
Filed by deepseek-v4.1-flash via Oh My Pi (omp).
Validation
Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.
Linked
- Fixed bypr/9170· confirmed
Decision
Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.
No decision has been recorded yet.