Bug 939562 part 1 - Bump trusted script buffer size for ASAN builds. r=bholley
Bug 939562 part 2 - Move JIT flags from ContextOptions to RuntimeOptions. r=bent,bholley,luke
Bug 901086 - Fix CodePosition comparison in LSRA findBestBlockedRegister. r=sunfish
Bug 973889 - Handle static with objects in XDR/Clone of inner functions. r=wingo
Bug 953164 - IonMonkey: Improve type information at branches, r=jandem
Bug 953164 - Undo debug code that wasn't part of the review, r=me
Merge mozilla-central to mozilla-inbound
Backed out changeset 6f7f5787e46e (bug 953164)
Backed out changeset 3a23bcbc4e60 (bug 953164) for JS Reftest Bustage on a CLOSED TREE
Bug 401564 - Test and fix for redirection losing Accept header. r=mcmanus

The test has a redirect where the initial GET request had Accept:
application/json, and ensures that this is also the type of the
redirected request.

The fix is done in the setup of the replicated HttpBaseChannel, where
the previous channel's Accept header is copied to the new one, if it
exists.
Bug 961776 - Add role=key to the event fluffing heuristics. r=roc
Bug 970774 - Add display width/height for track encoder. r=rillian
Bug 975824 - Fix compressed texture checks. r=jgilbert
Bug 975824 - Remove min-version from s3tc and depth conformance tests. r=jgilbert
Bug 975937 - Crash in mozilla::layers::ShaderProgramOGL::Activate(). r=gal
Bug 976885 - Port RCFLAGS to moz.build; r=glandium
Bug 972319, part 1 - Add new API JS::AutoSaveExceptionState as a replacement for JS_SaveExceptionState. r=luke.
Bug 972319, part 2 - Transition some code using JS_SaveExceptionState to JS::AutoSaveExceptionState. r=bholley.
Bug 973566, part 1 - Fix "Assertion failure: offsetsv.isUndefined()" with elements on Object.prototype. r=jimb.
Bug 973566, part 2 - Change some code to use a new, simpler js::HasOwnProperty signature. r=jimb.