Created attachment 184020 [details] test case I'm attaching a test case and investigating.
I rolled the patch out in http://trac.webkit.org/changeset/140482 . I'm going to fix bug 107193 a different way.