Hi,
Nah, there is no silicon bug.
I do not have time to make such example now.
Here is the correct configuration from example I have posted with AN. The timeout value is set to max. You should set it to for example 0x1000. have in mind that it must be less then FOSU counter. Otherwise FOSU will trigger destructive reset on its counter expire if no action is taken in fault state.
void FCCU_CONFIG (void)
{
/* Unlock configuration */
FCCU.TRANS_LOCK.R = 0xBC;
/* provide Config state key */
FCCU.CTRLK.R = 0x913756AF; //key for OP1
/* enter config state - OP1 */
FCCU.CTRL.R = 0x1; //set OP1 - set up FCCU into the CONFIG
/* wait for successful state transition */
while (FCCU.CTRL.B.OPS != 0x3); //operation status succesful
/* FCCU moves into the ALARM state if the respective fault is enabled */
FCCU.NCF_TOE[0].R = 0xFFFFFFFF; //ALARM Timeout Enable
FCCU.NCF_E[0].B.NCFE7 = 0x1; //Enable reaction on fault NCF[7]
FCCU.IRQ_ALARM_EN[0].R = 0x80; //Enable ALARM interrupt on fault NCF[7]
/* set up the NOMAL mode of FCCU */
FCCU.CTRLK.R = 0x825A132B; //key for OP2
FCCU.CTRL.R = 0x2; //set the OP2 - set up FCCU into the NORMAL mode
while (FCCU.CTRL.B.OPS != 0x3); //operational status successful
}//FCCU_CONFIG
Here is exact example for alarm state and action after timer expire. (It is for different micro, but the FCCU module configuration is the same).
Example MPC5746R FCCU Alarm State GHS716