draw_bmp: make code more obvious, remove assertion

Silences a Coverity warning.

Also, drop the assert(); although it should be pretty much guaranteed
that things happen this way, it's still a bit fuzzy.
README: add Coverity status

Because it looks nice.