snapshot: use sizeof(*fork_snap)