Bug 926778 - Prevent executable allocator from handing out poisoned pointers with JSGC_ROOT_ANALYSIS, r=terrence
Bug 923554 - Backout the atomic weak pointer implementation because it's neither atomic nor thread-safe; r=froydnj
Bug 902209 - Add mach pastebin; r=gps
Bug 925894 - Normalize cl generated dependencies before testing for spaces in them. p=glandium, r=gps
Bug 926847 - Watch for shapes without slots when looking for undefined properties, r=jandem.
Bug 927195 - Track prototype properties of functions used in instanceof operations, r=jandem.
Bug 922270 - Don't construct template objects during IonBuilder, r=jandem.
Bug 916106 - Avoid unwind loop when erroneously in leaf. r=BenWa
Bug 924573 - Deal with canvas 0 width and height more consistently. r=bas
Bug 925459 - Blocklist bitguard.dll for crashes. r=johnath
Bug 927204 - Cannot AddNamedRoot a nullptr, r=terrence
Bug 926361, make sure mutation observers can't see the parent when unbinding, r=jst
Bug 926997 - Eliminate toasts from Watcher service, bump version to 1.17; r=wlach
Bug 914017 - Initialize members variables of the document hash correctly. r=sicking.

--HG--
extra : rebase_source : 0b3b69cbd4366fe301c7613767b2a883358a3a5b
Bug 926598: fix some this-in-initializer warnings and remove tabs in MediaPipeline r=ekr
Backed out changeset 403bbc5e127f (bug 914888) for intermittent xpcshell failures.
Bug 921035 - Dont phi-eliminate scopeChain object in heavyweight functions if it may be neede for argsobj construction later. r=h4writer
Backed out changeset b4ebfef56fee (bug 922270) for SM(r) failures.
Merge m-c to inbound.
Bug 924986 - Make threadsafe builds the default for spidermonkey; sr=jorendorff,r=gps