There's a crash in the hit testing code when content uses transform-style: preserve-3d, but has no transforms.
Created attachment 28341 [details] Patch, testcase, changelog
Comment on attachment 28341 [details] Patch, testcase, changelog r=me
http://trac.webkit.org/changeset/41471