Fault tolerant PWM generation with double-redundant logic