869 	struct il_scan_cmd *scan;  in il4965_request_scan()  local
894 	scan = il->scan_cmd;  in il4965_request_scan()
895 	memset(scan, 0, sizeof(struct il_scan_cmd) + IL_MAX_SCAN_SIZE);  in il4965_request_scan()
897 	scan->quiet_plcp_th = IL_PLCP_QUIET_THRESH;  in il4965_request_scan()
898 	scan->quiet_time = IL_ACTIVE_QUIET_TIME;  in il4965_request_scan()
909 		scan->suspend_time = 0;  in il4965_request_scan()
910 		scan->max_out_time = cpu_to_le32(200 * 1024);  in il4965_request_scan()
917 		scan->suspend_time = cpu_to_le32(scan_suspend_time);  in il4965_request_scan()
929 			scan->direct_scan[p].id = WLAN_EID_SSID;  in il4965_request_scan()
930 			scan->direct_scan[p].len =  in il4965_request_scan()
932 			memcpy(scan->direct_scan[p].ssid,  in il4965_request_scan()
942 	scan->tx_cmd.tx_flags = TX_CMD_FLG_SEQ_CTL_MSK;  in il4965_request_scan()
943 	scan->tx_cmd.sta_id = il->hw_params.bcast_id;  in il4965_request_scan()
944 	scan->tx_cmd.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;  in il4965_request_scan()
948 		scan->flags = RXON_FLG_BAND_24G_MSK | RXON_FLG_AUTO_DETECT_MSK;  in il4965_request_scan()
984 	scan->good_CRC_th =  in il4965_request_scan()
994 	scan->tx_cmd.rate_n_flags = cpu_to_le32(rate | rate_flags);  in il4965_request_scan()
1015 	scan->rx_chain = cpu_to_le16(rx_chain);  in il4965_request_scan()
1018 	    il_fill_probe_req(il, (struct ieee80211_mgmt *)scan->data,  in il4965_request_scan()
1021 			      IL_MAX_SCAN_SIZE - sizeof(*scan));  in il4965_request_scan()
1022 	scan->tx_cmd.len = cpu_to_le16(cmd_len);  in il4965_request_scan()
1024 	scan->filter_flags |=  in il4965_request_scan()
1027 	scan->channel_count =  in il4965_request_scan()
1029 					 (void *)&scan->data[cmd_len]);  in il4965_request_scan()
1030 	if (scan->channel_count == 0) {  in il4965_request_scan()
1031 		D_SCAN("channel count %d\n", scan->channel_count);  in il4965_request_scan()
1036 	    le16_to_cpu(scan->tx_cmd.len) +  in il4965_request_scan()
1037 	    scan->channel_count * sizeof(struct il_scan_channel);  in il4965_request_scan()
1038 	cmd.data = scan;  in il4965_request_scan()
1039 	scan->len = cpu_to_le16(cmd.len);  in il4965_request_scan()