Large SQL body for a Cursor

Question

I am trying to build a store procedure to return a rowset from DB. I am using a cursor that I build dynamically based on some input parameters. One of the parameters is actually the where clause of the sql statement and sometimes this can be really big, over 4000 characters. This will end up in having the body of the cursor greater than 4000 characters. As a matter of fact one sql statement I was testing had 16K. I can't get it to work, if the body of the cursor is that big. Same SQL statement runs perfect in SQLDeveloper Worksheet.
So I guess my question is: Is there a limitation in the size of the sql statement inside of a cursor?
This is the code:
Procedure doNothing(cursor1 OUT T_CURSOR, param1 VARCHAR2, param2 VARCHAR2)
IS
aaa VARCHAR2(32000);
BEGIN
aaa:='select f1,f2,f3,f4, ' || param1 ||'
from Table T1
where ' || param2 ||'
group by f1,f2,f3,f4, ' || param1 || ' ';
OPEN cursor1 FOR aaa;
END;
both param1 and param2 are larger than 4000 characters.
The error I am geting is:
          Message     "[1704] ORA-01704: string literal too long\nORA-06512: at \"XXXXXX.YYYYYYY\", line 75\nORA-06512: at line 1\n"     string
Thank you!

Answer 1

Thank you for your answer. I was playing with Bind Variables a bit but unfortunatelly I can't use them.
Procedure doNothing(cursor1 OUT T_CURSOR, param1 VARCHAR2, param2 VARCHAR2)
IS
aaa VARCHAR2(32000);
BEGIN
aaa:='select F1,F2,F3,F4, ' || param1 ||' as F5
from Table T1
where ' || param2 ||'
group by f1,f2,f3,f4, ' || param1 || ' ';
OPEN cursor1 FOR aaa;
END;
In this case param1 is a huge string > 4000. Also I use a group by clause and therefore I need to pass it in the group by clause also.
My where clause is built dynamically and also > 4000 char. I just want somehow to be able to concatenate all these together and run a cursor on the resulted SQL. I am really not worried about SQL injection at this point.
Is there any other way I can return a rowset from an ORACLE stored procedure, without using cursors? Like in SQL Server where you can only provide the SQL Statement?
Thank you!