From 319c3172f2d74a6e1e9d2efb1d94ac6f45e635b9 Mon Sep 17 00:00:00 2001 From: maksymnevajdev Date: Fri, 1 Dec 2023 09:48:30 +0300 Subject: [PATCH] fix panic in prepared sql --- internal/sanitize/sanitize.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/internal/sanitize/sanitize.go b/internal/sanitize/sanitize.go index e9e6d228..f9091cd4 100644 --- a/internal/sanitize/sanitize.go +++ b/internal/sanitize/sanitize.go @@ -35,6 +35,11 @@ func (q *Query) Sanitize(args ...any) (string, error) { str = part case int: argIdx := part - 1 + + if argIdx < 0 { + return "", fmt.Errorf("first sql argument must be > 0") + } + if argIdx >= len(args) { return "", fmt.Errorf("insufficient arguments") }