Return a 'broken image' thumbnail for invalid images.

Instead of raising an AssertionError (??).