--- a/js/src/jsfun.cpp
+++ b/js/src/jsfun.cpp
@@ -1097,17 +1097,18 @@ js_PutCallObject(JSContext *cx, JSStackF
 
         /* This could be optimized as below, but keep it simple for now. */
         CopyValuesToCallObject(callobj, 0, NULL, bindings.countVars(), fp->slots());
     } else {
         JSFunction *fun = fp->fun();
         JS_ASSERT(fun == callobj.getCallObjCalleeFunction());
         JS_ASSERT(script == fun->script());
 
-        if (uintN n = bindings.countArgsAndVars()) {
+        uintN n = bindings.countArgsAndVars();
+        if (n > 0) {
             JS_ASSERT(JSObject::CALL_RESERVED_SLOTS + n <= callobj.numSlots());
 
             uint32 nvars = bindings.countVars();
             uint32 nargs = bindings.countArgs();
             JS_ASSERT(fun->nargs == nargs);
             JS_ASSERT(nvars + nargs == n);
 
             JSScript *script = fun->script();

--- a/js/src/methodjit/StubCalls.cpp
+++ b/js/src/methodjit/StubCalls.cpp
@@ -2690,17 +2690,17 @@ stubs::ConvertToTypedInt(JSContext *cx, 
     if (vp->isNull() || vp->isObject() || vp->isUndefined())
         return 0;
 
     if (vp->isBoolean())
         return vp->toBoolean() ? 1 : 0;
 
     JS_ASSERT(vp->isString());
 
-    int32 i32;
+    int32 i32 = 0;
 #ifdef DEBUG
     bool success = 
 #endif
         StringToNumberType<jsint>(cx, vp->toString(), &i32);
     JS_ASSERT(success);
 
     return i32;
 }
@@ -2716,17 +2716,17 @@ stubs::ConvertToTypedFloat(JSContext *cx
     if (vp->isNull()) {
         vp->setDouble(0);
     } else if (vp->isObject() || vp->isUndefined()) {
         vp->setDouble(js_NaN);
     } else if (vp->isBoolean()) {
         vp->setDouble(vp->toBoolean() ? 1 : 0);
     } else {
         JS_ASSERT(vp->isString());
-        double d;
+        double d = 0;
 #ifdef DEBUG
         bool success = 
 #endif
             StringToNumberType<double>(cx, vp->toString(), &d);
         JS_ASSERT(success);
         vp->setDouble(d);
     }
 }