Currently the dirty rect used to update the texture can be larger than the size of the texture which can result in a crash. Dirty rects can get out of sync with image sizes if the compositor is behind in rendering and the Image has changed size in the meantime.
Created attachment 67867 [details] Proposed patch
Committed r67714: <http://trac.webkit.org/changeset/67714>