Bug 864216 - Allow generating IonScriptCounts for asm.js compiled functions, r=luke.
Bug 418615 - Neuter the code which tries to reframe existing plugin instances when navigator.plugins.refresh(true) is called. Instead, only scan for new plugins, unload unused plugins. The DOM code will continue to refresh the current page which calls navigator.plugins.refresh(true). r=jschoenick sr=bz
Bug 854082 - Attribute bug 621618 assertions to the proper test. r=gfritzsche
Bug 854082 - Test. r=bsmedberg
Bug 854082 - Restore SetFrame(null) call to avoid instance owners pointing to dead frames. r=bsmedberg
Bug 854082 - Cleanup plugin frame ownership, prevent losing our frame due to re-entrance. r=bsmedberg
Bug 863792 - Handle re-entry during plugin instantiation. r=josh
Bug 863792 - Test. r=josh
Bug 857324: Make column set reflow continue without balancing rather than restarting if computed height is exceeded. [r=mats]
Bug 781702 - silence warning spew from nsXBLProtoImplMethod.cpp; r=bz
Bug 866611 - Fix length check when inlining string concatenation. r=h4writer
Bug 862761 - Use divider drawable for ExpandableListView childDivider
Bug 865923 - Use solid shapes in listSelector drawables
Bug 865729 - Remove nsIJSContextStack from content/foo. r=gabor

We leave it in nsContentUtils.cpp, which we'll handle in a separate patch.
Bug 865729 - Remove nsIJSContextStack from dom/foo. r=gabor
Bug 865729 - Remove nsIJSContextStack from xpconnect/loader. r=gabor
Bug 865729 - Remove nsIJSContextStack from other miscellaneous parts of gecko. r=gabor
Bug 865729 - Make nsIXPConnect inherit nsIThreadJSContextStack. r=gabor

Right now, the concrete nsXPConnect implements nsIXPConnect and
nsIThreadJSContextStack separately. I want to migrate the API from the latter
interface to the former, but I can't right now because it means we'd end up
with a duplicated method (getSafeJSContext). Since there's only one concrete
class that implements nsXPConnect, let's just use interface inheritance, which
simplifies the migration.
Bug 865729 - Make nsContentUtils munge the cx stack with sXPConnect directly. r=gabor
Bug 865729 - Use sXPConnect directly in caps. r=gabor

It's tempting to go through nsContentUtils here, but I'm pretty sure caps is
initialized before nsContentUtils.