m_layerForOverhangAreas is sometimes not positioned correctly when topContentInset has changed <rdar://problem/16644710>
Created attachment 231431 [details] Patch
Thanks Anders! http://trac.webkit.org/changeset/168777