From 96f64f4ee2afc0a6db76390134dd183d59ca5351 Mon Sep 17 00:00:00 2001
From: cui <cuiweixie@gmail.com>
Date: Tue, 17 Feb 2026 00:33:35 +0800
Subject: [PATCH] codec: fix is_readable should be buffer empty or not (#7912)

---
 tokio-util/src/codec/framed_impl.rs |  3 +-
 tokio-util/tests/framed.rs          | 53 +++++++++++++++++++++++++++++
 2 files changed, 55 insertions(+), 1 deletion(-)

diff --git a/tokio-util/src/codec/framed_impl.rs b/tokio-util/src/codec/framed_impl.rs
index 5647023ff..341f09b1b 100644
--- a/tokio-util/src/codec/framed_impl.rs
+++ b/tokio-util/src/codec/framed_impl.rs
@@ -65,6 +65,7 @@ impl Default for WriteFrame {
 
 impl From<BytesMut> for ReadFrame {
     fn from(mut buffer: BytesMut) -> Self {
+        let is_readable = !buffer.is_empty();
         let size = buffer.capacity();
         if size < INITIAL_CAPACITY {
             buffer.reserve(INITIAL_CAPACITY - size);
@@ -72,7 +73,7 @@ impl From<BytesMut> for ReadFrame {
 
         Self {
             buffer,
-            is_readable: size > 0,
+            is_readable,
             eof: false,
             has_errored: false,
         }
diff --git a/tokio-util/tests/framed.rs b/tokio-util/tests/framed.rs
index ec8cdf00d..5d7607744 100644
--- a/tokio-util/tests/framed.rs
+++ b/tokio-util/tests/framed.rs
@@ -140,6 +140,59 @@ fn external_buf_grows_to_init() {
     assert_eq!(read_buf.capacity(), INITIAL_CAPACITY);
 }
 
+// Regression test: `Framed::from_parts` with an empty read buffer (but with
+// capacity, as produced by `into_parts()` after consuming all data) should NOT
+// call `decode()` before actually reading from the underlying IO.
+//
+// Before the fix, `is_readable` was derived from `buffer.capacity() > 0`, which
+// was always true after `reserve()`. This caused a spurious `decode()` call on
+// the empty buffer before any IO read.
+#[tokio::test]
+async fn from_parts_empty_read_buf_does_not_spuriously_decode() {
+    struct TrackingDecoder {
+        decode_count: usize,
+    }
+
+    impl Decoder for TrackingDecoder {
+        type Item = u32;
+        type Error = io::Error;
+
+        fn decode(&mut self, buf: &mut BytesMut) -> io::Result<Option<u32>> {
+            self.decode_count += 1;
+            if buf.len() < 4 {
+                return Ok(None);
+            }
+            let n = buf.split_to(4).get_u32();
+            Ok(Some(n))
+        }
+    }
+
+    impl Encoder<u32> for TrackingDecoder {
+        type Error = io::Error;
+        fn encode(&mut self, item: u32, dst: &mut BytesMut) -> io::Result<()> {
+            dst.reserve(4);
+            dst.put_u32(item);
+            Ok(())
+        }
+    }
+
+    // Underlying IO provides exactly one 4-byte frame.
+    let data: &[u8] = &[0, 0, 0, 42];
+    let mut parts = FramedParts::new(data, TrackingDecoder { decode_count: 0 });
+    // Simulate a buffer recycled from a previous Framed via `into_parts()`:
+    // empty but has capacity.
+    parts.read_buf = BytesMut::with_capacity(INITIAL_CAPACITY);
+
+    let mut framed = Framed::from_parts(parts);
+    let num = assert_ok!(framed.next().await.unwrap());
+    assert_eq!(num, 42);
+
+    // With the fix: decode is called once (after reading data from IO).
+    // Before the fix: decode was called twice (once on the empty buffer, then
+    // once after reading), because `is_readable` was incorrectly `true`.
+    assert_eq!(framed.codec().decode_count, 1);
+}
+
 #[test]
 fn external_buf_does_not_shrink() {
     let mut parts = FramedParts::new(DontReadIntoThis, U32Codec::default());