Add panic handling to each function

[jsha]

Since unwinding across an FFI boundary is undefined behavior (rust-lang/rust#58794), we should handle panics and return errors instead of continuing to unwind.

[jsha]

Done in #25.