diff --git a/kdc/digest.c b/kdc/digest.c
index 20904d853..554da6031 100644
--- a/kdc/digest.c
+++ b/kdc/digest.c
@@ -820,6 +820,7 @@ _kdc_do_digest(krb5_context context,
 		if (ireq.u.ntlmRequest.lm.length != 24) {
 		    krb5_set_error_string(context, "LM hash have wrong length "
 					  "for NTLM session key");
+		    ret = EINVAL;
 		    goto out;
 		}