Ticket #16262: auth-models.patch

contrib/auth/models.py

@@ -39 +39 @@
     Returns a boolean of whether the raw_password was correct. Handles
     encryption formats behind the scenes.
     """
-    algo, salt, hsh = enc_password.split('$')
-    return constant_time_compare(hsh, get_hexdigest(algo, salt, raw_password))
+    try:
+        algo, salt, hsh = enc_password.split('$')
+        return constant_time_compare(hsh, get_hexdigest(algo, salt, raw_password))
+    except ValueError:
+        return False
 
 def update_last_login(sender, user, **kwargs):
     """