Bug 1011474 - Don't trash CallTemp1 register in malloc/free stubs; r=mjrosenb
Bug 1021286 - Remove a GC analysis suppression which is now defunct; r=luke
Bug 1022381 - Enforce that strongly-typed geometric classes are used with a proper coordinate system tag type. r=kats
Bug 1019164 - Invalidate the old visible region when we change mask layers since the visible region might have changed at the same time. r=tn
Bug 1022741 - Use CrossShadowCurrentDoc() in Element::UpdateState. r=smaug
Bug 940845 - Part 6: Cache blurs when possible. r=Bas
Bug 858787 - Enable CSP 1.0 parser in B2G and update certified app CSP to be legacy-compatible (relaxed). r=gwagner,grobinson
Bug 1013586 - Detect and immediately crash on cross compartment bugs in RegExpShared, r=billm.
Bug 1022421 - Cache value of FaviconHelper::GetICOCacheSecondsTimeout() in AsyncDeleteAllFaviconsFromDisk so that we don't use pref service off main thread. r=jimm
Bug 1022467 - Proxy destruction of WMFVideoOutputSource's DXVA2Manager to main thread. r=padenot
Bug 1022468 - Detect EOS in MP4Stream::ReadAt(). r=kentuckyfriedtakahe
Bug 1022027 - Fix leak in off-main-thread parsing (r=bhackett)

--HG--
extra : rebase_source : 06d12e96de4397dc3f7dfba5efd4088251defc38
Bug 1022272 - Lets WebGL's draw{Arrays,Elements}() generate INVALID_OPERATION when all vertex attributes' divisor are different of 0 - r=jgilbert
Bug 1022077 - Fixes a bug in WebGL's vertex array objects' software implementation - r=jgilbert
Bug 982961 - Use different expected assertion range for layout/generic/crashtests/847209.html on Android; r=dholbert
Bug 982915 - Use different expected assertion range for layout/base/crashtests/898913.html on Android; r=dholbert
Merge m-c to inbound
Bug 1023655 - Remove DOCTYPEs from SVG documents to avoid failed DTD loads. r=Unfocused
Bug 1019881 - Ensure the default purgeable zone is after the default zone on OS X. rs=njn
Bug 1020715.  Remove the quickstubs for quota API.  r=peterv