Bug 864216 - Allow generating IonScriptCounts for asm.js compiled functions, r=luke.
Bug 418615 - Neuter the code which tries to reframe existing plugin instances when navigator.plugins.refresh(true) is called. Instead, only scan for new plugins, unload unused plugins. The DOM code will continue to refresh the current page which calls navigator.plugins.refresh(true). r=jschoenick sr=bz
Bug 854082 - Attribute bug 621618 assertions to the proper test. r=gfritzsche
Bug 854082 - Test. r=bsmedberg
Bug 854082 - Restore SetFrame(null) call to avoid instance owners pointing to dead frames. r=bsmedberg
Bug 854082 - Cleanup plugin frame ownership, prevent losing our frame due to re-entrance. r=bsmedberg
Bug 863792 - Handle re-entry during plugin instantiation. r=josh
Bug 863792 - Test. r=josh
Bug 857324: Make column set reflow continue without balancing rather than restarting if computed height is exceeded. [r=mats]
Bug 781702 - silence warning spew from nsXBLProtoImplMethod.cpp; r=bz
Bug 864579: Drop unnecessary const-removing casts from CalcQuirkContainingBlockHeight. r=heycam
Bug 834513 follow-up: Mode AudioNode::DestroyMediaStream into the cpp file, and inline UnbindFromEngine
Bug 862078 - Use an about:config preference to control multiprocess browsing, part 1 (r=felipe)
Bug 862078 - Use an about:config preference to control multiprocess browsing, part 2 (r=felipe)
Bug 862078 - Use an about:config preference to control multiprocess browsing, part 3 (r=felipe)
Bug 863968. Don't unbind frame buffer if we didn't composite. r=bjacob
Bug 864544 - Make HTMLMediaElement::mPlayed a cycle collected nsRefPtr. r=cpearce,smaug

The current code is safe, but brittle. Making this explicitly
refcounted and traced protects against future code changes.
Fix document.dir getters and setters to (a) work and (b) conform to HTML5. Bug 151407, r=ehsan
Change tests that depended on the behaviour before bug 151407 was fixed, r=Ms2ger
Bug 730441 - Fix null-pointer crash in nsTreeColumns::RestoreNaturalOrder().  r=tnikkel