Help with Garage and sanitized strings...

Good evening,


I was trying to sanitize statements, but something went awkward. The following non sanitized codelet works ok:

    str := 'INSERT INTO chaves_de_encriptacao (
                    numero_funcional,
                    chave_privada,
                    chave_publica) VALUES (''',
                    self personId leaId asString,''', ''',
                    self keyPair privateKey asAsn1DerBytes asByteArray hex,''', ''',
                    self keyPair publicKey asAsn1DerBytes asByteArray hex,''')'.

    [ dbConnection execute: str ] on: Exception do: [ ^ false ].


But sanitized one:

    str := dbConnection createStatement: 'INSERT INTO chaves_de_encriptacao (
                        numero_funcional,
                        chave_privada,
                        chave_publica) VALUES (''?'', ''?'', ''?'')'.

    str prepare.

    str at: 1 bind: self personId leaId asString.
    str at: 2 bind: self keyPair privateKey asAsn1DerBytes asByteArray hex.
    str at: 3 bind: self keyPair publicKey asAsn1DerBytes asByteArray hex.


    str execute.


returns exception mysqld_stmt_send_long_data (obviously same thing happens with the shorthand

    str := dbConnection prepare: ...

And I inspect most things but could not understand what's going bad.

numero_funcional is INT(11)

chave_privada is VARBINARY(4096)

chave_publica is VARBINARY(4096)

Currently private and public keys are RSA 2048 keys (so, easilly under the 4096 bytes available).

I wonder if the at: bind: consider that the parameter is a string ended by \0 or something like that (that would explain the error message).

As SQL is not my field, I wonder if someone could help to elucidate what's going on.

Best regards,


Casimiro Barreto