database/sql: check NumInput on Stmt.Exec

Fixes issue 3678.

R=golang-dev, bradfitz
CC=golang-dev
https://codereview.appspot.com/6460087

Committer: Brad Fitzpatrick <bradfitz@golang.org>