To reproduce: 1. Go to http://webkit.org/blog-files/3d-transforms/transform-style.html 2. Hover over the box with the blue border 3. Move your mouse out of the box with the blue border After step 2, the yellow and green rectangles disappear, but should instead be rendered flattened into the purple rectangle. After step 3, the yellow and green rectangles appear *both* flattened and unflattened, but should only appear unflattened.
<rdar://problem/7465615>
Created attachment 50972 [details] Patch
Created attachment 51097 [details] replacement patch This separates the removeFromSuperLayer loop from the insertSublayer loop in the setSublayers method. This is safer to avoid mutating the array while traversing it.
Comment on attachment 51097 [details] replacement patch r=me but this needs a layout test (written to assume that pixel and/or layer dumping is available in future).
Landed in http://trac.webkit.org/changeset/56200
I am working on printing the layer tree from DRT. When I land that, I will land a test for this bug as a proof of concept