Bug 1111995 - Clip buttons to their border area for event hit testing.  r=roc
Bug 1111995 - Mochitest.
Bug 1112278 - Create a GC regression benchmark; r=sfink

--HG--
extra : rebase_source : bc2d308d144a901ff858470725d2d647b458fb96
Bug 867348 - Part 1: Add an analysis that catches calls to certain functions involving arithmetic expressions; r=jrmuizel
Bug 867348 - Part 2: Apply MOZ_NO_ARITHMETIC_EXPR_IN_ARGUMENT to CheckedInt's constructor; r=jrmuizel,cpearce

Note that the analysis currently just looks at the AST subtree of the
function call site and is therefore unable to correctly deal with cases
such as the last two hunks of the change to OggCodecState.cpp.  Fixing
the analysis to deal with that would be very difficult, so we currently
adjust the code so that it compiles.  The first hunk in that file though
is a real bug that this analysis found.
Bug 1105065: Remove an #ifdef, to fix a -Wunused-private-field build warning in GMPLoader.cpp for builds with --disable-sandbox. r=cpearce
Bug 1113419: Make eUnit_Filter ordering more consistent, in switch statements & enum definition in StyleAnimationValue.h,cpp r=krit
(no bug) Fix typo in copypasted assertion text in nsStyleBasicShape accessors. rs=krit over IRC
Bug 1113005 - Copy only the necessary number of bytes from the source buffer; r=froydnj

--HG--
extra : rebase_source : 06c78b0ae291ac14d9433c7c7fe47907437f0da9
Bug 1112974 - Try to find llvm-config through clang first before looking at $PATH; r=glandium

Right now, if the LLVMCONFIG variable is not set in the .mozconfig, we
first look for the system default llvm-config and only then we ask clang
itself, which breaks building with the clang plugin if you make $CC and
$CXX point to a non-default clang binary.  This patch fixes the issue
by reversing the search order.

--HG--
extra : rebase_source : 23ab716f4e220097e4c31092475dba769f4e7dfc
Bug 1024809 - (OneCRL) Create a blocklist mechanism to revoke intermediate certs (r=keeler,Unfocused)
Bug 1113677 - Fold instanceof operations in IonBuilder. r=bhackett
No bug - fix typo r=me
Bug 1112278 - Add some more benchmarks to gc-ubench; r=tests

--HG--
extra : rebase_source : 22263604a4374ff6312e344ecda82b93f230a165
Backed out changeset a6c8c4ccb5e7 (bug 1113005) because of mochitest-4 bustage on a CLOSED TREE
backout changeset 339049fcea42 (bug 1024809) for android and b2g bustage on a CLOSED TREE
Bug 1095510 - See if ClearRect has weird data. r=jmuizelaar

--HG--
extra : rebase_source : bc587fc96d30cac3ef829f8ceabc72aae6831a98
Backed out changesets 5f7211d4190d and bac36f6e728f (bug 1111995) for B2G desktop mochitest failures.
CLOSED TREE
Bug 1109437 - Remove MOZ_COUNT_{C,D}TOR on refcounted promise classes. r=cpearce

These were accidental and redundant, because refcounted classes get this behavior
automatically. And this is very lucky, because it turns out that our MOZ_COUNT_*
infrastructure can't handle varying-sized instances identified with the same
string, which is exactly what we can get with these templated types.

The only remaining use of these macros is on the non-templated ThenValueBase,
which is happily not variable-sized. \o/
Bug 1109437 - Generalize GetBufferingWait to UseBufferingHeuristics. r=cpearce