Bug 950438 - IonMonkey: The intersection of two ranges that both contain NaN is not empty. r=nbp, a=1.2.x+
Bug 951366 - Use AutoDetectInvalidation for disabled GetElement caches. r=h4writer, a=1.2.x+