nss: fix build
xulrunner: add upstream patches