Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Win2k SYSTEM_PROCESS_INFORMATION structure

1 view
Skip to first unread message

Stephan Friedl

unread,
May 24, 2001, 11:22:10 PM5/24/01
to
I have a piece of code that uses NtQuerySystemInformation to return a
list of threads for a given process. This code works fine on NT 4,
but is broken on Win2k. It does not fault, it just returns bad
information.

I am assuming that the data structure returned by this undocumented
call has changed between NT 4 and Win2k.

Does anyone have the new structure?

Thanks,

Stephan

Jerry Coffin

unread,
May 25, 2001, 5:14:54 PM5/25/01
to
In article <fa627baa.01052...@posting.google.com>,
sfr...@siebel.com says...

> I have a piece of code that uses NtQuerySystemInformation to return a
> list of threads for a given process. This code works fine on NT 4,
> but is broken on Win2k. It does not fault, it just returns bad
> information.

As long as all you want is a list of threads, it's probably easier to
use Thread32First/Thread32Next to get it.

--
Later,
Jerry.

The Universe is a figment of its own imagination.

Nico Bendlin

unread,
Jun 8, 2001, 4:48:27 AM6/8/01
to
typedef struct _SYSTEM_PROCESSES { // Information Class 5
ULONG NextEntryDelta;
ULONG ThreadCount;
ULONG Reserved1[6];
LARGE_INTEGER CreateTime;
LARGE_INTEGER UserTime;
LARGE_INTEGER KernelTime;
UNICODE_STRING ProcessName;
KPRIORITY BasePriority;
ULONG ProcessId;
ULONG InheritedFromProcessId;
ULONG HandleCount;
ULONG SessionId; // <- not explained by Nebbett
ULONG Reserved2;
VM_COUNTERS VmCounters;
IO_COUNTERSEX IoCounters; // Windows 2000 only !!!
SYSTEM_THREADS Threads[1];
} SYSTEM_PROCESSES, *PSYSTEM_PROCESSES;


"Stephan Friedl" <sfr...@siebel.com> schrieb im Newsbeitrag news:fa627baa.01052...@posting.google.com...

0 new messages