Bug 882027. Route all calls to GetNextFrameStatus for determining the readyState through nsBuiltinDecoder::UpdateReadyStateForData on the main thread. r=cpearce,a=leo+
Bug 880601. Emulate a form of keyframe skipping by allowing nsMediaOmxReader::DecodeVideoFrame to decode more than one video frame if video decoding is falling behind. r=cpearce,a=leo+

If we don't support this in any way, then we get into trouble when there is
plenty of compressed data buffered but for some reason video decoding falls
behind (maybe there was a short period where the video data wasn't available).
Audio playback continues normally, but nsMediaOmxReader keeps making one call
to ReadAudio and one to ReadVideo, and if each call to ReadAudio decodes at
least as much as the calls to ReadVideo, video decoding can never catch up
to the current audio playback position. So video never plays. And when the
video decoding point gets far enough away from the audio decoding point,
horrible things start to happen, such as video and audio reading completely
different parts of the media cache and interfering with the caching mechanism
(which assumes audio and video reads are close together).

This patch approximates keyframe skipping, and is basically just a way for
nsMediaOmxReader::DecodeVideoFrame to decode more than one frame at a time
if we need video decoding to catch up.

To prevent pathological situations, we cap both the maximum number of frames
decoded per DecodeVideoFrame and the amount of time we spend in the method
(excluding the time for the last frame).
Bug 811679 - Add nsIEditorObserver back. r=ehsan, a=leo+
Bug 860546 - [keyboard] Notify keyboard when the content of current input field is changed by JS. r=fabrice, a=leo+
Bug 711043 - Factor out operator type checks from the middle of feMorphology loop. r=roc a=bajaj
Bug 865537 - Part 1: Add nsRange::SetEnableGravitationOnElementRemoval to suppress 'gravitation' behavior on node removal. r=smaug, a=bajaj
Bug 865537 - Part 2: The Range used to track the source element pointer for a media element should not gravitate outside the media element. r=cpearce, a=bajaj
Bug 881014 - Cancel buttons in UI should call RP's oncancel method. r=jedp, a=leo+
Bug 881026 - Closing trusted UI should send null assertion to get() callers. r=benadida, a=leo+
Bug 879683 - Allow MarionetteTestResult and MarionetteTextTestRunner to be subclassed. r=jgriffin, a=test-only
Bug 880648 - [MMS] Accented characters are not correctly sent/received in a MMS (part 1, content blob should be encoded by utf-8). r=vicamo, a=leo+
Bug 880561 - B2G MMS: Add 2 more error status (in flight mode and no sim card) when sending MMS. r=gene, a=leo+
Bug 867895 - Ensure the geolocation provider's high accuracy flag is reset when all requests that require it are satisfied. r=dougt a=leo+
Bug 881424 - Set B2G SimplePush serverURL to Mozilla Push Server. r=jrconlin, a=dougt
Bug 883505 - [Bluetooth] Support for CHLD=0 of HFP. r=echou, a=leo+
Bug 884440 - Remove item correctly from vector. r=doublec, a=leo+
Bug 868913 - [Buri][Tethering] PC can't display RNDIS com port when reset handset. r=mrbkap, a=leo+
Bug 868913 - Part 2: Fix the wifi initial start problem. r=mrbkap, a=leo+
Bug 883084 - GetListOfCameras() in GonkCameraManager does not enumerate the list of camera. r=mikeh, a=leo+,hd+
Bug 831237 - Reduce APZC buffer churn. r=BenWa, a=leo+

Prevents the display port from getting smaller as the visible region
approaches the edges of the scrollable rect.