CH32X035F8U6 hardwaretimer PWM bug

[0x0fe]

So apparently there is a bug in hardwaretimer PWM mode 1 for CH32X035F8U6 :

The first bug is that CH_PIN_CHANNEL(pinmap_function(digitalPinToPinName(PA7), PinMap_PWM)); will return the value 1, but it should return the value 2 (PA7 is T3C2).

The second bug is that if srvTim->setMode(channel2, TIMER_OUTPUT_COMPARE_PWM1, PA7); is called, it will just crash the system.
When only srvTim->setMode(channel1, TIMER_OUTPUT_COMPARE_PWM1, PA6); is called, the PWM on PA6 works normally.

HardwareTimer *srvTim;
uint32_t channel1,channel2;

void setup() { 
  Serial.begin(115200);
  Serial.println("\n\nSystem init");
  
  TIM_TypeDef *Instance = (TIM_TypeDef *)pinmap_peripheral(digitalPinToPinName(PA6), PinMap_PWM);
  channel1 = 1;//CH_PIN_CHANNEL(pinmap_function(digitalPinToPinName(PA6), PinMap_PWM));
  channel2 = 2;//CH_PIN_CHANNEL(pinmap_function(digitalPinToPinName(PA7), PinMap_PWM)); // BUG returns 1 instead of 2
  srvTim = new HardwareTimer(Instance);
  srvTim->setOverflow(100, HERTZ_FORMAT); 
  srvTim->setMode(channel1, TIMER_OUTPUT_COMPARE_PWM1, PA6);
  //srvTim->setMode(channel2, TIMER_OUTPUT_COMPARE_PWM1, PA7); // BUG crashes if enabled
 }
void loop() {
  // Interval::handler();
  Serial.printf("PWM A\n");
  for(int i=0; i<320; i++){
    time = map(i, 0, 320, 500, 2500); 
    srvTim->setCaptureCompare(channel1, time,  MICROSEC_COMPARE_FORMAT);
    delay(8);
  }
  for(int i=320; i>0; i--){
    time = map(i, 0, 320, 500, 2500); 
    srvTim->setCaptureCompare(channel1, time,  MICROSEC_COMPARE_FORMAT);
    delay(8);    
  }
  Serial.printf("PWM B\n");
  for(int i=0; i<320; i++){
    time = map(i, 0, 320, 500, 2500); 
    srvTim->setCaptureCompare(channel2, time,  MICROSEC_COMPARE_FORMAT);
    delay(8);
  }
  for(int i=320; i>0; i--){
    time = map(i, 0, 320, 500, 2500);
    srvTim->setCaptureCompare(channel2, time,  MICROSEC_COMPARE_FORMAT);
    delay(8);    
  }
 }