Index: libexec/httpd/cgi-bozo.c
===================================================================
RCS file: /cvsroot/src/libexec/httpd/cgi-bozo.c,v
retrieving revision 1.56
diff -p -u -r1.56 cgi-bozo.c
--- libexec/httpd/cgi-bozo.c	20 Sep 2023 08:41:35 -0000	1.56
+++ libexec/httpd/cgi-bozo.c	4 Jun 2026 13:17:42 -0000
@@ -633,38 +633,38 @@ bozo_process_cgi(bozo_httpreq_t *request
 
 	close(sv[1]);
 
-	/* parent: read from stdin (bozo_read()) write to sv[0] */
-	/* child: read from sv[0] (bozo_write()) write to stdout */
+	/* parent: read from sv[0] (bozo_write()) write to stdout */
+	/* child: read from stdin (bozo_read()) write to sv[0] */
 	pid = fork();
 	if (pid == -1)
 		bozoerr(httpd, 1, "io child fork failed: %s", strerror(errno));
 	else if (pid == 0) {
-		/* child reader/writer */
-		close(STDIN_FILENO);
-		finish_cgi_output(httpd, request, sv[0], nph);
-		/* if we do SSL, send a SSL_shutdown now */
-		bozo_ssl_shutdown(request->hr_httpd);
-		/* if we're done output, our parent is useless... */
-		kill(getppid(), SIGKILL);
-		debug((httpd, DEBUG_FAT, "done processing cgi output"));
+		close(STDOUT_FILENO);
+		/* CGI programs should perform their own timeouts */
+		while ((rbytes = bozo_read(httpd, STDIN_FILENO, buf,
+		    sizeof buf)) > 0) {
+			ssize_t wbytes;
+			while (rbytes) {
+				wbytes = write(sv[0], buf, (size_t)rbytes);
+				if (wbytes > 0)
+					rbytes -= wbytes;
+				else
+					bozoerr(httpd, 1, "write failed: %s",
+						strerror(errno));
+			}		
+		}
+		debug((httpd, DEBUG_FAT, "done processing cgi input"));
 		_exit(0);
 	}
-	close(STDOUT_FILENO);
 
-	/* CGI programs should perform their own timeouts */
-	while ((rbytes = bozo_read(httpd, STDIN_FILENO, buf, sizeof buf)) > 0) {
-		ssize_t wbytes;
-
-		while (rbytes) {
-			wbytes = write(sv[0], buf, (size_t)rbytes);
-			if (wbytes > 0)
-				rbytes -= wbytes;
-			else
-				bozoerr(httpd, 1, "write failed: %s",
-					strerror(errno));
-		}		
-	}
-	debug((httpd, DEBUG_FAT, "done processing cgi input"));
+	/* child reader/writer */
+	close(STDIN_FILENO);
+	finish_cgi_output(httpd, request, sv[0], nph);
+	/* if we do SSL, send a SSL_shutdown now */
+	bozo_ssl_shutdown(request->hr_httpd);
+	/* if we're done output, our child is useless... */
+	kill(pid, SIGKILL);
+	debug((httpd, DEBUG_FAT, "done processing cgi output"));
 	exit(0);
 
  out: