backout bd072e286fc0 (bug 858617) for assertion failures in check-jit-test
Bug 845741: Set mUpdateFinished under lock r=roc
Bug 858617: IonMonkey: When inlining box unknown inputs, r=nbp
Bug 814037 - Check overflow x and overflow y when doing visibility checks with Marionette. Atom updated. r=mdas
Bug 794410 - Prevent drag and dropping an about: tab to the download button downloading the associated XUL file. r=paolo
Bug 843445 - B2G MMS: Provide nsIDOMMobileMessageManager.retrieveMMS()  to retrieve MMS for the deferred retrieval mode, part-2:mms_service. r=vyang, r=gene.lian, sr=sicking
Bug 858833 - During an update, downloadAvailable is sometimes not reset to false after an error when it should. r=fabrice
Bug 855514: IonMonkey: Add fastpath for JSOP_TOID for ints and doubles that fit into an int, r=jandem