# DF-3652 — ci_populate_mvdd_value returns -EINVAL unconditionally, so MemoryACPILevel.MinMvdd is always programmed as 0 (upstream-inverted success return)

File: `sys/dev/drm/radeon/ci_dpm.c` (pass 2, GLM 5.3 re-audit)
Severity: Info  |  CWE-670 Always-Incorrect Control Flow Implementation  |  confidence: certain

## Reproduce
No harness: the defect is a NULL/UAF control-flow property (source-level certainty);
the kernel path needs CI-class hardware absent from the guest — see env.txt.

    (source review only; see VERDICT.md)

Full narrative: VERDICT.md. Proposed fix: fix.diff (authored against the read-only
sys/ tree; never applied there).