Add a comment

Author: Eclips4

.github/setup-rust-windows/action.yml

@@ -14,12 +14,17 @@ runs:
     - uses: dtolnay/rust-toolchain@1.91.1
       with:
         targets: i686-pc-windows-msvc,x86_64-pc-windows-msvc,aarch64-pc-windows-msvc
+    # LIBCLANG_PATH must be set explicitly so the vcxproj uses the LLVM we
+    # install here rather than the VS-bundled LLVM whose clang headers have
+    # AVX intrinsic bugs.  The values are hardcoded literals (no attacker-
+    # controlled input), so the GITHUB_ENV writes are safe.
     - name: Install LLVM for bindgen
       if: inputs.arch != 'arm64'
       shell: cmd
       run: |
         choco install llvm --allow-downgrade --no-progress --version 21.1.0
         if not exist "C:\Program Files\LLVM\bin\libclang.dll" exit /b 1
+        echo LIBCLANG_PATH=C:\Program Files\LLVM\bin>> "%GITHUB_ENV%"
     # Chocolatey's LLVM package only ships x64 binaries, which an ARM64-native
     # cargo process cannot load.  Install the official ARM64 build directly.
     - name: Install LLVM for bindgen (ARM64)
@@ -30,3 +35,4 @@ runs:
         Invoke-WebRequest 'https://github.com/llvm/llvm-project/releases/download/llvmorg-21.1.0/LLVM-21.1.0-woa64.exe' -OutFile $installer
         Start-Process -Wait -FilePath $installer -ArgumentList '/S','/D=C:\Program Files\LLVM'
         if (!(Test-Path 'C:\Program Files\LLVM\bin\libclang.dll')) { exit 1 }
+        echo "LIBCLANG_PATH=C:\Program Files\LLVM\bin" >> $env:GITHUB_ENV  # zizmor: ignore[environment-file]