ssh: avoid panic in packet path

use debug_validate_bug_on instead

rust/src/ssh/ssh.rs

@@ -267,15 +267,12 @@ impl SSHState {
                         }
                         Err(Err::Incomplete(_)) => {
                             //we may have consumed data from previous records
-                            if input.len() < SSH_RECORD_HEADER_LEN {
+                            debug_validate_bug_on!(input.len() >= SSH_RECORD_HEADER_LEN);
-                                //do not trust nom incomplete value
+                            //do not trust nom incomplete value
-                                return AppLayerResult::incomplete(
+                            return AppLayerResult::incomplete(
-                                    (il - input.len()) as u32,
+                                (il - input.len()) as u32,
-                                    SSH_RECORD_HEADER_LEN as u32,
+                                SSH_RECORD_HEADER_LEN as u32,
-                                );
+                            );
-                            } else {
-                                panic!("SSH invalid length record header");
-                            }
                         }
                         Err(_e) => {
                             SCLogDebug!("SSH invalid record header {}", _e);