Fix coming.
Yay! Thank you!
I'm not sure i'd take the time to make a layout test for this unless there's an obvious mechanism - the dom pro to bug #127969 is clearly capable of triggering it
Created attachment 222944 [details] the patch.
Comment on attachment 222944 [details] the patch. ouch.
Thanks. Landed in r163274: <http://trac.webkit.org/r163274>.