bisect: use the new generic "sha1_pos" function to lookup sha1