Subject: H5HG_READ Segmentation Fault in HDF5 V1.14.0

Software: HDF5 V1.14.0 Operating System: Ubuntu 18.04.6 LTS Compiler: clang

Build Process: The software was built using the following steps and options:

 ./configure --disable-shared --enable-static-exec && make

No additional build options were required beyond the default ones provided.

Test Procedure: The following command was used for the test:

tools/src/h5diff plain_model.h5 {id:crash_file}

The file plain_model.h5 is available within the provided package located here.

Observation: During the execution of the aforementioned command, a segmentation fault (SIGSEGV) was observed. The stack trace for the segmentation fault is as follows:

Starting program: /root/hdf5-1.14.0/tools/src/h5diff/h5diff /root/hdf5-1.14.0/in/plain_model.h5 /root/hdf5-1.14.0/out/fuzz00/crashes/id:000025,sig:11,src:000000,op:flip1,pos:3977
Program received signal SIGSEGV, Segmentation fault.
0x000000000061c617 in H5HG_read (f=<optimized out>, hobj=<optimized out>, object=0xee5ca8, 
    buf_size=<optimized out>) at H5HG.c:611
611         if (heap->obj[0].begin) {
...
#17 0x0000000000441b2d in h5diff (fname1=<optimized out>, fname2=<optimized out>, objname1=<optimized out>, 
    objname2=<optimized out>, opts=0x7fffffffdb90) at h5diff.c:1047
#18 0x0000000000400d47 in main (argc=<optimized out>, argv=<optimized out>) at h5diff_main.c:98

Note: For corpus and "in" file, only the plain_model.h5 file was utilized. However, both files can be used for the $BASE_MODEL.