Bug 827687, patch 2:  Be more careful walking segments.  r=bzbarsky
Merge mozilla-central into mozilla-inbound
Bug 827255 - Patch 1: Enable AG error result code, r=echou
Back out bug 588237, patches 2 through 5.
Bug 824481 - Cleanup style attribute getters; r=bz
Bug 828244 - Part a: Pass MutableHandleId to ValueToIdentifier; r=terrence
Bug 828244 - Part b: Pass MutableHandleValue to Debugger::resultToCompletion; r=terrence
Bug 828244 - Part c: Pass MutableHandleValue to Debugger::{wrap,unwrap}DebuggeeValue and add handleAt methods to AutoArrayRooter and AutoValueArray; r=terrence
Bug 828244 - Part d: Pass MutableHandleValue to Debugger::wrapEnvironment; r=terrence
Bug 828244 - Part e: Pass MutableHandleValue to DebuggerGenericEval; r=terrence
Bug 828244 - Part f: Pass MutableHandleValue to Debugger::{new,receive}CompletionValue; r=terrence
Bug 828248 - Part a: Pass MutableHandleId to ValueToId and DoubleIndexToId; r=sfink
Bug 828248 - Part b: Pass MutableHandleId to IndexToId and IndexToIdSlow; r=sfink
Bug 828248 - Part c: Pass MutableHandleId to Shape::getUserId; r=sfink
Bug 828248 - Part d: Pass MutableHandleId to FetchElementId; r=sfink
Bug 828248 - Part e: Pass MutableHandleId to InternNonIntElementId; r=sfink
Bug 828248 - Part f: Pass MutableHandleId to ValueIsSpecial; r=sfink
Bug 828293 - Root js_NativeSet's vp argument; r=terrence
Bug 828595 - Pass a HandleId to js_GetPropertyHelperInline; r=terrence
Bug 828494 - Part a: Pass MutableHandleValue to GetOwnPropertyDescriptor; r=terrence