# DF-1324 - Verification Verdict

**Status:** reproduced (reproduced=1)
**Impact:** none
**Confidence:** certain

## Finding
Wrong loop bound in iceland_populate_smc_mvdd_table uses VddciLevelCount instead of MvddLevelCount

## Source Location
sys/dev/drm/amd/powerplay/smumgr/iceland_smumgr.c:675-680

## Verdict
Source-confirmed: Wrong loop bound in iceland_populate_smc_mvdd_table uses VddciLevelCou. Fix applies and compiles.

## Fix Status
fixed: VALIDATED: fix.diff batch-compiled into single kernel build rc=0 -Werror on 6.5-DEVELOPMENT #0

## Summary
iceland_populate_smc_mvdd_table at iceland_smumgr.c:677: loop uses count<table->VddciLevelCount (copy-paste from VDDCI function). Correct: table->MvddLevelCount. Reads mvdd_voltage_table.entries[count], writes MvddLevel[count]. Memory-bounded by upstream trim (both<=4) so no OOB currently. Logic defect: inconsistent MvddLevelCount vs populated entries. Tonga sibling correct (:373). Fix: change VddciLevelCount to MvddLevelCount.