Bug 858780 - Turn on CSP 1.0 spec compliant flag in Android settings. r=mfinkle
Bug 867460 - Remove notion of ShaderProgramTypes from gfx/gl. r=bschouten, sr=joe
Bug 884182 - Prevent incorrect state transition. r=doublec
Bug 884407 - Use an enum in SpeechRecognitionError. r=smaug
Bug 883037 - Clean up HOLD/DROP of nsHTMLDocument. r=peterv
Bug 886660 - Fix the leak in FFTBlock::SetFFTSize(); r=roc
Bug 884369 - Fix callsite cloning in poly inline dispatch + rooting in IC. (r=sstangl)
Bug 887002 - Don't track PC-sensitive type for rest arrays. (r=bhackett)
Bug 886632 - Rename ParallelArrayAnalysis to ParallelSafetyAnalysis; move it before GVN; remove its dependency on JSContext. (r=nmatsakis)

--HG--
rename : js/src/ion/ParallelArrayAnalysis.cpp => js/src/ion/ParallelSafetyAnalysis.cpp
rename : js/src/ion/ParallelArrayAnalysis.h => js/src/ion/ParallelSafetyAnalysis.h
No bug: Fix typo in name of unused parameter. DONTBUILD

--HG--
extra : rebase_source : d067ab4920157e8bd388eecc6df5130b0c3b61c4
Backed out changeset 1bf0cdeacb22 (bug 867460) for assertions in various test suites

Landed on a CLOSED TREE