ssh: avoid panic in packet path

use debug_validate_bug_on instead

rust/src/ssh/ssh.rs

@@ -267,15 +267,12 @@ impl SSHState {
                         }
                         Err(Err::Incomplete(_)) => {
                             //we may have consumed data from previous records
-                            if input.len() < SSH_RECORD_HEADER_LEN {
+                            debug_validate_bug_on!(input.len() >= SSH_RECORD_HEADER_LEN);
                             //do not trust nom incomplete value
                             return AppLayerResult::incomplete(
                                 (il - input.len()) as u32,
                                 SSH_RECORD_HEADER_LEN as u32,
                             );
-                            } else {
-                                panic!("SSH invalid length record header");
-                            }
                         }
                         Err(_e) => {
                             SCLogDebug!("SSH invalid record header {}", _e);