UPDATE: This bug appears to be fixed in Safari 3 Beta.
Here it is: a gray, one-cell, no-width-specified table, with a 100x100 scrolling (overflow:auto) div inside. In this div, there are floating (float: left) span tags with content inside (text).
You would expect that the table would expand to fit the defined width of the div tag. But in Safari and Shiira, the table expands to fit the height of the content inside the div, not the height of the div. This behavior does not occur if the content is not floated.