diff --git a/ble/gatt_client.c b/ble/gatt_client.c
index 2db2d1d3b..674f09b06 100644
--- a/ble/gatt_client.c
+++ b/ble/gatt_client.c
@@ -578,9 +578,10 @@ static void gatt_client_run(){
     linked_item_t *it;
     for (it = (linked_item_t *) gatt_client_connections; it ; it = it->next){
 
+        gatt_client_t * peripheral = (gatt_client_t *) it;
+
         if (!l2cap_can_send_fixed_channel_packet_now(peripheral->handle)) return;
 
-        gatt_client_t * peripheral = (gatt_client_t *) it;
         // printf("- handle_peripheral_list, mtu state %u, client state %u\n", peripheral->mtu_state, peripheral->gatt_client_state);
         
         switch (peripheral->mtu_state) {
diff --git a/ble/sm.c b/ble/sm.c
index 4fd10aab5..8430f383c 100644
--- a/ble/sm.c
+++ b/ble/sm.c
@@ -857,7 +857,7 @@ static void sm_run(void){
 
     // assert that we can send either one
     if (!hci_can_send_command_packet_now()) return;
-    if (!l2cap_can_send_fixed_channel_packet_now(connection->handle)) return;
+    if (!l2cap_can_send_fixed_channel_packet_now(connection->sm_handle)) return;
 
     sm_key_t plaintext;