Backed out changeset b158656d754e (bug 921035) for test bustage
Bug 926778 - Prevent executable allocator from handing out poisoned pointers with JSGC_ROOT_ANALYSIS, r=terrence