ORA-06512 and/or ORA-00936 ... simple procedure problem probably

Question

I'm passing in codes like the following to the stored procedure (below):
",IRE,UK,FR,SCOT,WALES" (a string of words seperated by a ',')
Problem is I get the following error:
ORA-00936: missing expression ORA-06512: at "APPNAME.PKG_TOOL", line 132 ORA-06512: at line 1
I googled the two ORA's but am still stumped. I'd appreciate any help at all as I'm still not overly familiar with SQL.
PROCEDURE sp_check_code_Exist(p_CodeList IN varchar, p_cursorSMB IN OUT cursorSMB) IS
     thissql varchar(1000);
     BEGIN
          thissql := thissql || 'select * from codes_data c where ';
          thissql := thissql || 'c.code in ('|| p_CodeList ||') ';
          open p_cursor FOR thissql;
          begin
                 Execute immediate thissql;
          end;
     END sp_check_code_Exist;

Answer 1

I know this is digressing a bit from the thread heading but I'd like to know if I really will be screwed if I don't optimise.
The machine that this is being hosted on will be a top notch machine with a very fat line and will have probably only thousands of codes.
This is the code as it stands now
PROCEDURE sp_check_GenericCodes(p_GenericsList IN varchar, p_cursorSMB IN OUT cursorSMB) IS
     thissql varchar(1000);
     BEGIN
          thissql := thissql || 'select distinct generic_code from emc_codes_data ed where ';
          thissql := thissql || 'ed.generic_code in ('||p_GenericsList||')';
          open p_cursorSMB FOR thissql;
     END sp_check_GenericCodes;So all I'll be returning is a few thousand words which will then be sorted alphabetically and will be then compared to another string which will be sorted alphabetically, to see if there is any missing code, and if there are then those codes will be spit out to an admin who will realise he made a mistake and where the mistake is.
This is how its all called:
public string checkGenericCodesExist(string codesList)
               OracleDataReader rdr = null;
               DBConnect dbConnLocal = null;
               OracleCommand cmd = null;
               string sRetVal = null;
               string CurrentFunction = "PPTEngine.clsPart.genericCodeExsists";               
               try
                    dbConnLocal = new DBConnect(CurrentFunction, "Pkg_SMBTool.sp_check_GenericCodes", m_Stream);
                    // Pass in parameters
                    dbConnLocal.addParam(new OracleParameter("p_cursorSMB", OracleType.Cursor));                    
                    dbConnLocal.setParamDirection("p_cursorSMB",ParameterDirection.Output);
                    dbConnLocal.addParam(new OracleParameter("p_GenericsList", OracleType.VarChar));
                    dbConnLocal.setParamValue("p_GenericsList", codesList);                    
                    // Execute
                    cmd = dbConnLocal.ExecuteProcedure();
                    rdr = (OracleDataReader)cmd.Parameters["p_cursorSMB"].Value;
                    // Loop
                    if (rdr.HasRows)
                         while (rdr.Read())
                              if (!rdr.IsDBNull(rdr.GetOrdinal("Generic_Code"))) m_GenericCode = rdr.GetString(rdr.GetOrdinal("Generic_Code"));
                    rdr.Close();
                    //remove the '
                    string[] PPTCodes = codesList.Replace( "'", null).Split("','".ToCharArray());
               catch (Exception e)
                    Log.WriteToFile(CurrentFunction + " - " + e.Message, System.Diagnostics.TraceLevel.Error);
                    throw e;
               finally
                    if (dbConnLocal!=null) dbConnLocal.Close();
               return sRetVal;
          }The above function is still a work in progress, but is almost there.