It's possible to hit infinite recursion in GraphicsLayerCA::updateGeometry()/swapFromOrToTiledLayer()/updateContentsScale()/swapFromOrToTiledLayer()... because updateContentsScale() uses a different size than updateGeometry() for the tiled layer check.
Created attachment 101360 [details] Patch
http://trac.webkit.org/changeset/91294