ofz: out-of-memory

Change-Id: If1c9ade3268f4ebadfdad771fe3b35641dca210d
Reviewed-on: https://gerrit.libreoffice.org/48506Reviewed-by: Eike Rathke <erack@redhat.com>
Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Caolán McNamara <caolanm@redhat.com>
Tested-by: Caolán McNamara <caolanm@redhat.com>

include/svl/zforlist.hxx

@@ -56,6 +56,8 @@ namespace com { namespace sun { namespace star {
 #define SV_COUNTRY_LANGUAGE_OFFSET     10000  // Max count of formats per country/language
 #define SV_MAX_COUNT_STANDARD_FORMATS  100    // Max count of builtin default formats per CL
 
+constexpr size_t NF_MAX_FORMAT_SYMBOLS = 100;
+
 /// The built-in @ Text format, offset within a locale, key in the locale the
 /// number formatter was constructed with.
 constexpr sal_uInt32 NF_STANDARD_FORMAT_TEXT = SV_MAX_COUNT_STANDARD_FORMATS;

svl/source/numbers/zforscan.hxx

@@ -30,7 +30,6 @@ class SvNumberFormatter;
 struct ImpSvNumberformatInfo;
 
 
-const size_t NF_MAX_FORMAT_SYMBOLS   = 100;
 const size_t NF_MAX_DEFAULT_COLORS   = 10;
 
 // Hack: nThousand==1000 => "Default" occurs in format string

xmloff/source/style/xmlnumfi.cxx

@@ -951,7 +951,7 @@ SvXMLNumFmtElementContext::SvXMLNumFmtElementContext( SvXMLImport& rImport,
                 break;
             case XML_TOK_ELEM_ATTR_MIN_EXPONENT_DIGITS:
                 if (::sax::Converter::convertNumber( nAttrVal, sValue, 0 ))
-                    aNumInfo.nExpDigits = nAttrVal;
+                    aNumInfo.nExpDigits = std::min<sal_Int32>(nAttrVal, NF_MAX_FORMAT_SYMBOLS);
                 break;
             case XML_TOK_ELEM_ATTR_EXPONENT_INTERVAL:
                 if (::sax::Converter::convertNumber( nAttrVal, sValue, 0 ))