Tests: sunspider/check-3d-raytrace.js v8-v5/check-crypto.js With gcc-4.6.3 run with --ion-eager: Python Exception <type 'exceptions.UnboundLocalError'> local variable 'address' referenced before assignment: #0 0x00000000004068c6 in js::GetObjectClass (obj=) at ../../mozilla/js/src/jsfriendapi.h:386 Python Exception <type 'exceptions.UnboundLocalError'> local variable 'address' referenced before assignment: #1 0x0000000000406cb2 in js::IsProxy (obj=) at ../../mozilla/js/src/jsproxy.h:242 #2 0x0000000000409bda in JSObject::isProxy (this=(const JSObject * const) 0x7ffff5d39140 Cannot access memory at address 0x7fffdad38178) at ../../mozilla/js/src/jsobjinlines.h:1303 #3 0x0000000000912f17 in IsCacheableListBase (obj=(JSObject *) 0x7ffff5d39140 Cannot access memory at address 0x7fffdad38178) at /home/terrence/moz/branch/green_our_tests/mozilla/js/src/ion/IonCaches.cpp:90 #4 0x0000000000916b89 in TryAttachNativeGetPropStub (cx=0xf91900, ion=0x1024e70, cache=..., obj=(JSObject * const) 0x7ffff5d39140 Cannot access memory at address 0x7fffdad38178, name="axis", safepointIndex=0x10261e0, returnAddr= 0x7ffff7fe0181, isCacheable=0x7fffffffb267) at /home/terrence/moz/branch/green_our_tests/mozilla/js/src/ion/IonCaches.cpp:856 #5 0x0000000000917619 in js::ion::GetPropertyCache (cx=0xf91900, cacheIndex=0x6, obj=(JSObject * const) 0x7ffff5d39140 Cannot access memory at address 0x7fffdad38178, vp=JSVAL_VOID) at /home/terrence/moz/branch/green_our_tests/mozilla/js/src/ion/IonCaches.cpp:962 #6 0x00007ffff7febf82 in ?? () #7 0x00007fffffffb3c0 in ?? () #8 0x00007fffffffb3a8 in ?? () #9 0x0000000000000014 in ?? () #10 0xfff9000000000000 in ?? () #11 0x0000000000f7d220 in ?? () #12 0x00007ffff5e2e550 in ?? () #13 0x00007ffff7fe0181 in ?? () #14 0x00000000000006c0 in ?? () #15 0x0000000000000006 in ?? () #16 0x00007ffff5d39140 in ?? () #17 0x0000000000000000 in ?? ()

This has been fixed by other rooting work.