Seeking advice / Flash Dumping a Renesas 78K0S (μPD78F9234)

Hi everyone,

I’m new here and have been spending the past few weeks working with a 78K0S/Kx1+ Renesas/NEC μPD78F9234. I am attempting to perform a Flash dump using the checksum method (Fault Injection).

My setup consists of a Teensy 4.0 for the glitching logic, using a 33-ohm resistor in the Vcc line. The NEC controller is running at a clock speed of 8MHz. I am working with a glitch step size of 1ns (adjustable).

For the software side, I’ve modified Andrew Belcher’s code from GitHub to initiate the bootloader sequence. The glitching is definitely having an effect, and I am successfully receiving data over the Single-Wire Interface.

However, I am struggling to interpret the resulting data—I feel like I’m going in circles at this point. I’d be happy to post the logs if anyone is interested. Has anyone here actively worked with this specific controller or a similar 78K0 series and could offer some tips?

Any ideas or insights would be greatly appreciated!

Best regards, Marc