Created attachment 147751 [details] Repro 'hoge' and 'fuga' are numbered 3 and 4 respectively, however it seems wrong rendering.
Here is simpler repro http://jsfiddle.net/bGJkj/ Since the parser doesn't allow nested <li>, the repro need to build the tree through scripting.
Created attachment 154223 [details] Patch
Dimitri, could you take a look? This is a trivial fix.
Comment on attachment 154223 [details] Patch Clearing flags on attachment: 154223 Committed r123570: <http://trac.webkit.org/changeset/123570>
All reviewed patches have been landed. Closing bug.