#546: M1518001 M1530958

js/src/gc/Nursery.cpp

@@ -169,6 +169,7 @@ js::Nursery::disable()
         return;
     numActiveChunks_ = 0;
     currentEnd_ = 0;
+    position_ = 0;
     updateDecommittedRegion();
 }
 

js/src/jit/JitOptions.cpp

@@ -185,7 +185,7 @@ DefaultJitOptions::DefaultJitOptions()
     }
 
     // Toggles whether unboxed plain objects can be created by the VM.
-    SET_DEFAULT(disableUnboxedObjects, false);
+    SET_DEFAULT(disableUnboxedObjects, true);
 }
 
 bool