Backout a0016de79bf9 and 862431c42e72 for breakage, r=red
Bug 861251 - Inline string concatenation in IonMonkey. r=luke
Bug 841363. Ensure padding-rect edges are included in scrollable area used to compute scrollWidth/scrollHeight for overflow:visible elements. r=matspal

--HG--
extra : rebase_source : 067c9577f797350274783d3c7cc682b5f74b998a
Bug 860253. Clear clip state on children of an nsDisplayTransform because they're in a different coordinate system, and we'll clip the nsDisplayTransform itself. r=mattwoodrow

--HG--
extra : rebase_source : 731dfa20fa0fda1feb7ab582deced011ff9c25fc
Bug 860579. Make FindContentInDocument use the frame tree as much as possible. r=mattwoodrow

--HG--
extra : rebase_source : c4d05d33fdc6b2bcc99437808f78ada8770f9263
Bug 784387 - Handle duplicate reading list item case (r=bnicholson)
Bug 784387 - Long press on reader button to add to reading list (r=lucasr)
Bug 861165: IonMonkey: Correct behaviour for JSOP_IN on dense native with negative index, r=bhackett
Bug 861116: IonBuilder: Add support for JSOP_INITELEM, r=jandem
Bug 841941 - Add a mochitest to check that the order in which @value/@min/@max/@step are specified in markup makes no difference to the value that <input type=range> will be given. r=mounir