diff --git a/src/bbl_l2tp_avp.c b/src/bbl_l2tp_avp.c
index 7c12e2b7..2f8d10cb 100644
--- a/src/bbl_l2tp_avp.c
+++ b/src/bbl_l2tp_avp.c
@@ -159,7 +159,7 @@ bbl_l2tp_avp_unhide(bbl_l2tp_tunnel_t *l2tp_tunnel, bbl_l2tp_avp_t *avp, uint8_t
 
     len = (digest[idx++] ^ *value) << 8;
     value++;
-    len = digest[idx++] ^ *value;
+    len |= digest[idx++] ^ *value;
     value++;
 
     if (len + 2 > avp->len) {