suppress some clang static analyzer false positives with asserts

The clang static analyzer warning of possible NULL deref, but in fact the API contract for these functions requires passing non-NULL.

Make that obvious to both the analyzer and human readers with asserts.