$OpenBSD$ index 152a115..e848ba7 100644 --- js/src/jsobjinlines.h.orig Fri Feb 20 15:40:37 2015 +++ js/src/jsobjinlines.h Fri Feb 20 15:40:37 2015 @@ -530,6 +530,10 @@ JSObject::create(js::ExclusiveContext *cx, js::gc::AllocKind kind, js::gc::Initi if (span) obj->initializeSlotRange(0, span); + // JSFunction's fixed slots expect POD-style initialization. + if (type->clasp()->isJSFunction()) + memset(obj->fixedSlots(), 0, sizeof(js::HeapSlot) * GetGCKindSlots(kind)); + return obj; }