diff: do not use null sha1 as a sentinel value