------- Comment #4 from jakub at gcc dot gnu dot org 2009-04-20 22:09 ------- What makes you think there is a problem on the _ZNSs5beginEv side? 0(%ebp) is saved %ebp, 4(%ebp) is caller IP, 8(%ebp) is address of return value (returned by invisible reference), 12(%ebp) is this pointer. If there is a crash on dereferencing the this pointer, it is a problem in the caller.
-- http://gcc.gnu.org/bugzilla/show_bug.cgi?id=39823