diff --git a/src/core/thread/mle.cpp b/src/core/thread/mle.cpp
index e955f58a5..f49b12631 100644
--- a/src/core/thread/mle.cpp
+++ b/src/core/thread/mle.cpp
@@ -3033,7 +3033,7 @@ ThreadError Mle::HandleDiscoveryResponse(const Message &aMessage, const Ip6::Mes
     VerifyOrExit(offset < end, error = kThreadError_Parse);
 
     offset += sizeof(tlv);
-    end = offset + sizeof(tlv) + tlv.GetLength();
+    end = offset + tlv.GetLength();
 
     memset(&result, 0, sizeof(result));
     result.mPanId = threadMessageInfo->mPanId;