Out-of-tree changes:
* update Goanna3 to git 2087e70e1...00fee1e0a:
- import changes from `dev' branch of rmottola/Arctic-Fox:
- Bug 1170200 - Part 2: Update JavaScript consumers of nsIPermissionManager::Remove; r=ehsan (aa1cbab01) (fd3bc37f6)
- import changes from `dev' branch of rmottola/Arctic-Fox:
- Fixup for hazard bustage after bug 1168719 on a CLOSED TREE. r=sfink (9c8d92138)
- Bug 1169869 - Document the Debugger's onPromiseSettled hook DONTBUILD; r=jimb (d601304f1)
- Bug 1168416 - Do not change lastIndex property if not writable in RegExp.prototype.{test,exec}. r=Waldo (3bd43d20b)
- Bug 1171749 - Re-add nonincremental reason to compact stats output; r=sfink (d257c5d3b)
- Bug 1165460 - Work around on-demand linker badness with NDK r10e/GCC 4.9 r=dhylands,glandium (dcdf2c92b)
- Bug 1170673 - MSVC is less flexible with zero-sized arrays; r=shu (e556ce826)
- Bug 1155618 - Add some more OOM tests r=terrence (b6637848b)
- Bug 1155618 - Test OOM behaviour of global creation r=terrence (eac8ae615)
- Bug 1155618 - Don't retry memory allocation if we're simulating OOM r=terrence (990c80307)
- Bug 1155618 - Fix tracelogger destructor that touches possibly uninitialised hash table r=benj (657e587bc)
- Bug 1161303 - Fix bug in NewObjectCache::newObjectFromHit() caused by previous patch in bug 1155618 r=terrence (3132d9d4d)
- Bug 1155618 - Fix some more places where we didn't report OOM to the context r=terrence (f9cf4b194)
- Bug 1155618 - Fix some more places we don't report allocation failure to the context r=terrence (33fa561c9)
- formatting (af5b94792)
- Bug 1054756, part 1 - Support symbol-keyed properties in JSXrayTraits::resolveOwnProperty(). r=jandem. (8f8f8df4b)
- Bug 1054756, part 2 - Move ToPrimitive slow paths into a non-inline function. r=jandem. (6bdde7843)
- Bug 1193924 - Add assertion to AsyncOpen to make sure asyncOpen2() was called first when securityflags in loadInfo are set (r=sicking) (e440e90b6)
- Bug 1194519 - call AsyncOpen2 within child and parent if securityFlags are present (r=jduell) (1ce87ade4)
- Bug 1204648 - Support AsyncOpen2,Open2,nsIUploadChannel and nsIUploadChannel2 on nsSecCheckWrapChannelBase. r=sicking (f6b6ae40f)
- Bug 1204703 - Add AsyncOpen2 to channels within JS tests (r=sicking) (2a650afa0) (45e1308fe)
- import changes from `dev' branch of rmottola/Arctic-Fox:
- Bug 1051146 - Part 1: Introduce the B2G specific build flags, initially enabled. r=smaug (341c7565d)
- Bug 1051146 - art 2: Introduce the new Pocketsphinx and Sphinxbase code with no build integration. r=smaug, r=gerv (f29eafa78)
- Bug 1051146 - Part 3: Introduce build system changes for the new Pocketsphinx and Sphinxbase code. r=smaug, r=gps (06c60429d)
- Bug 1051146 - Part 4: Introduce build system changes for the MOZ_WEBSPEECH_TEST_BACKEND flag. r=smaug, r=gps (16195e66e)
- Bug 1051146 - Part 5: Introduce new English model with no build integration. r=smaug (24996aa9c)
- Bug 1051146 - Part 6: Introduce build integration of new English model. r=smaug, r=gps (b718751a9)
- Bug 1051146 - Part 7: Introduce update scripts for Pocketsphinx and Sphinxbase code. r=smaug (5a85c7ed2)
- Bug 1051148 - Part 1: Patch that introduces WebSpeech API implementation. r=smaug (d18e5d86e)
- Bug 1171249 - Modified configure.in so MOZ_WEBSPEECH undefined implies both MOZ_WEBSPEECH_TEST_BACKEND and MOZ_WEBSPEECH_MODELS are undefined. r=gps (47d13fc61)
- Bug 1051148 - Part 2: Patch that turns off the WebSpeech API implementation using flags. r=gps (8b2ceef89)
- Bug 1051146 - Disable Pocketsphinx building on Windows due to bustage. r=gps (48f4a1c27)
- Bug 1204703 - Make nsContentSecurityManager scriptable (r=sicking) (fb514951a)
- Bug 1215745: Safer implemetation of nsJarChannel::AsyncOpen2. r=ckerschb (3ad0270b4)
- partial of Bug 1178892 - Split the profiler into Core & Gecko files and break apart monolithic headers. r=mstange (eda571469)
- Bug 1213407 - PluginModuleContentParent should delete its Transport. r=billm (153a54404)
- Bug 1169945 - Remove unused plugins.enumerable_names whitelist. r=bsmedberg (52126cbd8)
- Bug 1160166 - Disabled plugin meta information often isn't available to content processes. r=jimm (d63331192)
- Bug 1165981 - Only allow flash as a plugin on Windows 64-bit builds; r=bsmedberg (bfc073186)
- missing bit of 1164543 (5ef55bc55)
- Bug 1178963 part 1. Use nsIPluginTagInternal instead of nsPluginTag in cases where it may be nsFakePluginTag. r=peterv (f8702aead)
- Bug 1200484 (part 1) - Expose the column number in JS::DescribeScriptedCaller(). r=luke. (85cf65a1c)
- Bug 1200484 (part 2) - Use JS column numbers in ReportWrapperDenial(). r=mrbkap. (1de0e6331)
- Bug 1200484 (part 3) - Use JS column numbers in WebSocket.cpp. r=baku. (3febdd8bc)
- Bug 1200484 (part 4) - Expose the column number in nsJSUtils::GetCallingLocation(). r=mrbkap. (479ae5e2a)
- Bug 1200484 (part 5) - Use JS column numbers in XPCNativeInterface::NewInstance(). r=mrbkap. (63e5e4e41)
- Bug 1200484 (part 6) - Use JS column numbers in ContentParent::OnChannelError(). r=billm. (4c84ef09d)
- Bug 1139718 - Warning when sending MM messages that include XPCOM data (r=smaug) (d50774823)
- Bug 1200484 (part 7) - Use JS column numbers in GetParamsForMessage() (bf19fc4cb)
- Bug 1200484 (part

- Use JS column numbers in EventSource. r=khuey. (64374ed83)
- Bug 1200484 (part 9) - Use JS column numbers in nsContentUtils::ReportToConsoleNonLocalized. r=khuey. (4d81c5f4f)
- Bug 1200484 (part 10) - Use JS column numbers in indexedDB. r=khuey. (64eec5da6)
- Bug 1200484 (part 11) - Set source location when initializing an nsJSScriptTimeoutHandler from a Function. r=peterv. (f135b3a2c)
- Bug 1200484 (part 12) - Use JS column numbers in nsJSTimeoutHandler. r=peterv. (8ec21dc04)
- Bug 1163664 - Don't check for plugin blocklist state on Android. r=jimm, r=jchen (14b8f3e57)
- Bug 1178963 part 2. Implement nsFakePluginTag to represent a non-NPAPI "plugin" that is actually implemented in JavaScript. r=peterv (ba11d6de0)
- Bug 1178896 - Add support for determining if a plugin is OOP to nsIPluginHost. r=aklotz (e8689641f)
- Bug 1178963 part 3. Make nsPluginHost aware of fake plugins. r=peterv (a2a9f8cb3) (ee118c4b8)
- partly import changes from tenfourfox:
- first rolling release: update to 91ESR EV and roots, HSTS, TZs, TLDs (d7c93b6cf)
- security: M1730935, M1735152, M1730048 (1603b00d0) (03efa0b17)
- import changes from `dev' branch of rmottola/Arctic-Fox:
- Bug 1170676: Fix null dereference in PluginModuleParent::StreamCast; r=jimm (72e60e403)
- Bug 1164543 - Remove gAllInstances from PluginModuleChild (r=jimm) (15e035939)
- Bug 1164543 - Make plugin shutdown async in e10s (r=jimm) (e5239585f)
- Bug 1195527 - Part 1: Move D3D11 texture allocation into the TextureClient. r=jrmuizel (16e67d7e8)
- Bug 1195527 - Part 2: Add D3D11 video TextureClient recycler. r=jrmuizel (2c44d311b)
- more stuff todo (7b1bce288)
- Bug 1136945 - Add to Debugger.Memory docs possible outcomes of the nonincrementalReason in the onGarbageCollection event. r=fitzgen (33c6408ff)
- pointer style (05cc032b4)
- Bug 1197970 - Expose the GC cycle's number through Debugger.Memory's onGarbageCollection hook. r=sfink (5a420105f)
- Bug 1168992 - Part 1: Fix up reflection of classes. (r=Waldo) (5346e941b)
- Bug 1168992 - Part 2: Fix reflection of new.target. (r=Waldo) (38701b76d)
- Bug 1179063 - Hook up FunctionBox directly to the JSFunction being parsed to avoid allocating extra static scopes. (r=efaust) (d35252e18)
- Bug 1084319: Actually patter-match SIMD.bool (rebasing mistake); r=nbp (0980117b4)
- Bug 1200809 part 1 - Add InlinableNatives JitInfo infrastructure, use it for Math natives. r=bz,nbp (141e78aac)
- Bug 1193280 - Part 1: test stack trace handling of native frames with dedicated function. r=fitzgen (dd1c63891)
- Bug 1193280 - Part 2: Self-host Array.prototype.filter. r=jandem (82cbe1512)
- Bug 1200782 - Inline Array.isArray when we know the result statically. r=bhackett (546917507)
- Bug 1200809 part 2 - Convert Array natives to new InlinableNatives system. r=nbp (901aae723)
- Bug 1200809 part 3 - Convert String/RegExp natives to new InlinableNatives system. r=nbp (8e8eb68fd)
- Bug 1200809 part 4 - Convert Atomics natives to new InlinableNatives system. r=lth (430d8a6b8) (96d4680a6)
- import changes from `dev' branch of rmottola/Arctic-Fox:
- Bug 1190733 - Test initializedLength() instead of length() during the fast path for reversing unboxed arrays, r=jandem. (b5dcbd0e3)
- Bug 1070767 - Enable {Array, %TypedArray%}.prototype.includes in all builds. r=lth (de595c002)
- Bug 1195298 - Fix NewDenseArray intrinsic to work when the first argument is a double. r=till (1f551ada2)
- Bug 1190727 - Make initialization of temporary results array resilient against Array.prototype setters in self-hosted Map#next implementation. r=jandem (d705c623c)
- Bug 1200108 - Remove NewDenseArray intrinsic, use std_Array instead. r=till (e5c4126c6)
- Bug 1199822 - Turn self-hosting's cycle-check into an assertion; r=till (804600283)
- Bug 1194148 - Self-host Array.prototype.toString. r=till (4ffb4712c)
- pointer style (7b1a9900c)
- Bug 1200809 part 5 - Convert self-hosting intrinsics to new InlinableNatives system. r=till (8dd5eb0b9)
- pointer style (7974610a2)
- Bug 1200809 part 6 - Convert various natives to new InlinableNatives system. r=nbp (81d75199c)
- Bug 1200809 part 7 - Convert SIMD natives to new InlinableNatives system. r=nbp (5e67097e0)
- Bug 1200809 part 8 - Don't call shouldAbortOnPreliminaryGroups if we have an uninlinable native. r=bhackett (bd20f201f)
- Bug 1114507 - Part 1: Add/release the appId's refcnt if frame is in main process. r=kanru (741889791)
- Bug 1190903 - Don't send StopIMEStateManagement message after TabParent has been destroyed (r=masayuki) (97bba211b)
- Bug 1166592 - Remove ParentIdleListener from idle service when ActorDestroy() to avoid leaking ContentParent. r=khuey (771549a18)
- Bug 1114507 - Part 3: Remove PContetBridge channel when grandchild-process is killed. r=kanru (a84f888b3)
- Bug 1114507 - Part 2: Add/release the appId's refcnt in oop case. r=kanru (1fdb788b0)
- Bug 1114507 - Part 4: Test cases. r=kanru (889a770c7)
- pointer style (80bd2082b)
- Bug 1159347 - Make BaseProxyHandler::getPropertyDescriptor not-pure virtual. r=efaust (56de51919)
- Bug 1166847 - Implement OpaqueCrossCompartmentWrapper;r=evilpies (d762e785e) (fed708408)
- network: fix temporary variable type, this should fix not able to access port numbers that is larger than 32767. also updated bad port list from tenfourfox. (00fee1e0a)
* Notice: the changelog above may not always applicable to XULRunner code which K-Meleon uses.