From 11ec50a97edd58d4dd3eebe65dea02129d18a683 Mon Sep 17 00:00:00 2001
From: Christian Giese <christian@rtbrick.com>
Date: Tue, 23 Mar 2021 22:51:37 +0100
Subject: [PATCH] Fix L2TP unhide

---
 src/bbl_l2tp_avp.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/bbl_l2tp_avp.c b/src/bbl_l2tp_avp.c
index 7c12e2b7..2f8d10cb 100644
--- a/src/bbl_l2tp_avp.c
+++ b/src/bbl_l2tp_avp.c
@@ -159,7 +159,7 @@ bbl_l2tp_avp_unhide(bbl_l2tp_tunnel_t *l2tp_tunnel, bbl_l2tp_avp_t *avp, uint8_t
 
     len = (digest[idx++] ^ *value) << 8;
     value++;
-    len = digest[idx++] ^ *value;
+    len |= digest[idx++] ^ *value;
     value++;
 
     if (len + 2 > avp->len) {