diff --git a/winsup/cygwin/ChangeLog b/winsup/cygwin/ChangeLog
index 8650c1a8b..afe851f59 100644
--- a/winsup/cygwin/ChangeLog
+++ b/winsup/cygwin/ChangeLog
@@ -1,3 +1,7 @@
+2014-09-02  Corinna Vinschen  <corinna@vinschen.de>
+
+	* sec_acl.cc (aclsort32): Set errno to EINVAL if aclcheck32 failed.
+
 2014-08-31  Corinna Vinschen  <corinna@vinschen.de>
 
 	* uinfo.cc (pwdgrp::fetch_account_from_windows): Disallow user accounts
diff --git a/winsup/cygwin/sec_acl.cc b/winsup/cygwin/sec_acl.cc
index 1878b2ef3..fab77c99a 100644
--- a/winsup/cygwin/sec_acl.cc
+++ b/winsup/cygwin/sec_acl.cc
@@ -767,7 +767,10 @@ extern "C" int
 aclsort32 (int nentries, int, aclent_t *aclbufp)
 {
   if (aclcheck32 (aclbufp, nentries, NULL))
-    return -1;
+    {
+      set_errno (EINVAL);
+      return -1;
+    }
   if (!aclbufp || nentries < 1)
     {
       set_errno (EINVAL);