Correct PROCESS_BASIC_INFORMATION for 64 bit Windows.

sandbox/win/src/nt_internals.h

Index: sandbox/win/src/nt_internals.h
diff --git a/sandbox/win/src/nt_internals.h b/sandbox/win/src/nt_internals.h
index 40b29c6beb3276415bf845b19deb9458bca08a21..95481c99cfe6c3c8de794e6f98d51f4eb7ade201 100644
--- a/sandbox/win/src/nt_internals.h
+++ b/sandbox/win/src/nt_internals.h
@@ -311,12 +311,12 @@ typedef PVOID PPEB;
 typedef PVOID KPRIORITY;
 
 typedef struct _PROCESS_BASIC_INFORMATION {
-  NTSTATUS ExitStatus;
+  PVOID ExitStatus;

[scottmg, 2015/09/03 16:18:52]

This should be NTSTATUS on both x86 and x64, followed by 4bytes padding on x64.

MSDN documentation likely makes the reserved fields PVOID to imply that they're
opaque/internal but to make sure the size is correct.

[rickyz (no longer on Chrome), 2015/09/03 19:16:29]

Done.

   PPEB PebBaseAddress;
   KAFFINITY AffinityMask;
   KPRIORITY BasePriority;

[scottmg, 2015/09/03 16:18:52]

KPRIORITY is also 4 bytes, so this should be followed by 4 bytes padding on
x64...

[rickyz (no longer on Chrome), 2015/09/03 19:16:29]

Oops, fixed the definition of KPRIORITY in the file.

-  ULONG UniqueProcessId;
-  ULONG InheritedFromUniqueProcessId;
+  ULONG_PTR UniqueProcessId;

[scottmg, 2015/09/03 16:18:52]

... because both the ProcessIds are both ULONG_PTR.

[rickyz (no longer on Chrome), 2015/09/03 19:16:29]

Yeah.. the ExitStatus one I can understand - that's just being explicit about
alignment. I have no idea why they reserve 8 bytes for process ids here - it's
like CLIENT_ID where the process/thread ids are HANDLEs instead of DWORDs.

Anyway, I switched to the union approach that crashpad uses.

+  PVOID InheritedFromUniqueProcessId;
 } PROCESS_BASIC_INFORMATION, *PPROCESS_BASIC_INFORMATION;
 
 typedef NTSTATUS (WINAPI *NtQueryInformationProcessFunction)(