This fixes bug http://code.google.com/p/chromium/issues/detail?id=4076, which...

webkit/glue/multipart_response_delegate.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include <string>
 
 #include "base/compiler_specific.h"
 
 MSVC_PUSH_WARNING_LEVEL(0);
@@ skipping 229 matching lines @@
   WebCore::String content_type = response.httpHeaderField("Content-Type");
   std::string content_type_as_string =
       webkit_glue::StringToStdString(content_type);
 
   size_t boundary_start_offset = content_type_as_string.find("boundary=");
   if (boundary_start_offset == std::wstring::npos) {
     return false;
   }
 
   boundary_start_offset += strlen("boundary=");
-  size_t boundary_end_offset = content_type.length();
+
+  size_t boundary_end_offset =
+      content_type_as_string.find(';', boundary_start_offset);
+
+  if (boundary_end_offset == std::string::npos)
+    boundary_end_offset = content_type_as_string.length(); 
 
   size_t boundary_length = boundary_end_offset - boundary_start_offset;
 
   *multipart_boundary = 
       content_type_as_string.substr(boundary_start_offset, boundary_length);
   return true;
 }
 
 bool MultipartResponseDelegate::ReadContentRanges(
     const WebCore::ResourceResponse& response,
@@ skipping 40 matching lines @@
   std::string byte_range_upper_bound =
       content_range.substr(byte_range_upper_bound_start_offset,
                            byte_range_upper_bound_characters);
 
   if (!StringToInt(byte_range_lower_bound, content_range_lower_bound))
     return false;
   if (!StringToInt(byte_range_upper_bound, content_range_upper_bound))
     return false;
   return true;
 }