Security and patch rollup for FPR17 from ESR68

[classilla]

Through 40604532805a07a5a30be8a1cdef0f48975de71e
Build system, test and Mozilla-internal bugs omitted

Not relevant:
M1499093 (Android)
M1578907 (Catacrapalina)
M1554805 (WX)
M1570559 (no APZ)
M1592502 (GTK)
M1573753 (we don't have this regression)
M1580288 (not in code)
M1592371 (Windows)
M1591334 (not in code)
M1564127 (not IPC, we don't support VR)

Not taking:
M1560667 (compiler specific and likely to have more regression than benefit)
M1590845 (don't care)
M1426865 (don't care)
M1581084 (larger class of fingerprint bugs; we have no sensor data of interest here)

Deferred:
M1218456 moved to #579

Candidates:
M1580320 https://hg.mozilla.org/releases/mozilla-esr68/rev/9dced159051d
M1584170 https://hg.mozilla.org/releases/mozilla-esr68/rev/1bcfb098011f https://hg.mozilla.org/releases/mozilla-esr68/rev/4b95348b577e (as nsAutoTArray)
M1578143 https://hg.mozilla.org/releases/mozilla-esr68/rev/f83089aed736 (needs minimal changes such as EvictionThreshold() to mEvictionThreshold and possibly track->GetTrackBuffer() to GetTrackBuffer(track)???)

[classilla]

I should have read M1578143 more thoroughly. It was actually caused by M1531201, which we don't have, so we don't need it.

[classilla]

Interdiff

M1579612 (unaffected)
M1576374 (unaffected, and SafeBrowsing is dead against 45)
M1580156 (Windows)
M1594136 (unaffected)
M1546331 (we don't have M1211903, so I don't think we're susceptible)
M1583957 moved to #580
M1582215 (unaffected)
M1584986 (unaffected)
M1591077 (Android)
M1587962 (Catacrapalina)
M1593041 (don't care)
M1586496 (don't care)
M1591691 (we don't implement this)
M1588975 (Windows)

Current to 1cc2971e671a0816c122cbef798a53e577398ad6

[classilla]

Still need to figure out what to do with M1501152 ("this is a somewhat scary fix, so land first and see if there is any bustage"). https://hg.mozilla.org/releases/mozilla-esr60/rev/2ce17180fd4dd8828caa964ba55205a51c313355 https://hg.mozilla.org/releases/mozilla-esr60/rev/d8dd10ac54302e4bd9cf6c537f790933b149099d

[classilla]

Interdiff

M1322864 https://hg.mozilla.org/releases/mozilla-esr68/rev/30006ca3a1e1ce3419cc4360cb70d703bc14a40c (first half)
M1449736 (no plugins, no IPC)
M1585106 unlikely to be a problem, but won't hurt. https://hg.mozilla.org/releases/mozilla-esr68/rev/02a75a0b91b8e6c55a6489146432373c9c7e0e0f
M1597043 https://hg.mozilla.org/releases/mozilla-esr68/rev/d36df7bc9977
M1597543 (not in code)
M1579127 (unaffected)
M1580695 (unaffected)
M1589900 (unaffected)
M1575934 (unaffected)
M1585760 (unaffected, not enabled)
M1597273 (not implemented)
M1590453 (Android)
M1596078 (Android)

Current to 78ab5e054eb0a2a71f3d1f1875de5fc4c575ac91

NSS updates
M1579060 can't hurt https://hg.mozilla.org/projects/nss/rev/64e55c9f658e2a75f0835d00a8a1cdc2f25c74d6 (both files in security/pkix/lib)
M1586176 https://hg.mozilla.org/projects/nss/rev/1e22a0c93afe9f46545560c86caedef9dab6cfda

[classilla]

Wontfixing.