diff --git a/heavybuilds/.buildlist.heavybuilds b/heavybuilds/.buildlist.heavybuilds
new file mode 100644
index 0000000..dbfb8f9
--- /dev/null
+++ b/heavybuilds/.buildlist.heavybuilds
@@ -0,0 +1 @@
+firefox
diff --git a/heavybuilds/firefox/allow-custom-rust-vendor.patch b/heavybuilds/firefox/allow-custom-rust-vendor.patch
new file mode 100644
index 0000000..218650f
--- /dev/null
+++ b/heavybuilds/firefox/allow-custom-rust-vendor.patch
@@ -0,0 +1,564 @@
+From a5a3db2d32ff1d359aef5ec586b91164570c1685 Mon Sep 17 00:00:00 2001
+From: Dan Gohman <sunfish@mozilla.com>
+Date: Tue, 5 Nov 2019 09:56:15 -0800
+Subject: [PATCH 1/7] Support custom vendor strings.
+
+Add support for custom vendors, as in "x86_64-gentoo-linux-musl".
+
+Fixes #33.
+---
+ src/targets.rs | 108 ++++++++++++++++++++++++++++++++++++++++++++++++-
+ src/triple.rs  |   4 --
+ 2 files changed, 106 insertions(+), 6 deletions(-)
+
+diff --git a/src/targets.rs b/src/targets.rs
+index 6ae570e..90b2736 100644
+--- a/third_party/rust/target-lexicon-0.9.0/src/targets.rs
++++ b/third_party/rust/target-lexicon-0.9.0/src/targets.rs
+@@ -1,6 +1,8 @@
+ // This file defines all the identifier enums and target-aware logic.
+ 
+ use crate::triple::{Endianness, PointerWidth, Triple};
++use alloc::boxed::Box;
++use alloc::string::String;
+ use core::fmt;
+ use core::str::FromStr;
+ 
+@@ -292,7 +294,7 @@ impl Aarch64Architecture {
+ 
+ /// The "vendor" field, which in practice is little more than an arbitrary
+ /// modifier.
+-#[derive(Copy, Clone, Debug, PartialEq, Eq, Hash)]
++#[derive(Clone, Debug, PartialEq, Eq, Hash)]
+ #[allow(missing_docs)]
+ pub enum Vendor {
+     Unknown,
+@@ -306,6 +308,15 @@ pub enum Vendor {
+     Sun,
+     Uwp,
+     Wrs,
++
++    /// A custom vendor. "Custom" in this context means that the vendor is
++    /// not specifically recognized by upstream Autotools, LLVM, Rust, or other
++    /// relevant authorities on triple naming. It's useful for people building
++    /// and using locally patched toolchains.
++    ///
++    /// Outside of such patched environments, users of `target-lexicon` should
++    /// treat `Custom` the same as `Unknown` and ignore the string.
++    Custom(Box<String>),
+ }
+ 
+ /// The "operating system" field, which sometimes implies an environment, and
+@@ -717,6 +728,7 @@ impl fmt::Display for Vendor {
+             Vendor::Sun => "sun",
+             Vendor::Uwp => "uwp",
+             Vendor::Wrs => "wrs",
++            Vendor::Custom(ref name) => name,
+         };
+         f.write_str(s)
+     }
+@@ -738,7 +750,46 @@ impl FromStr for Vendor {
+             "sun" => Vendor::Sun,
+             "uwp" => Vendor::Uwp,
+             "wrs" => Vendor::Wrs,
+-            _ => return Err(()),
++            custom => {
++                use alloc::borrow::ToOwned;
++
++                // A custom vendor. Since triple syntax is so loosely defined,
++                // be as conservative as we can to avoid potential ambiguities.
++                // We err on the side of being too strict here, as we can
++                // always relax it if needed.
++
++                // Don't allow empty string names.
++                if custom.is_empty() {
++                    return Err(());
++                }
++
++                // Don't allow any other recognized name as a custom vendor,
++                // since vendors can be omitted in some contexts.
++                if Architecture::from_str(custom).is_ok()
++                    || OperatingSystem::from_str(custom).is_ok()
++                    || Environment::from_str(custom).is_ok()
++                    || BinaryFormat::from_str(custom).is_ok()
++                {
++                    return Err(());
++                }
++
++                // Require the first character to be an ascii lowercase.
++                if !custom.chars().nth(0).unwrap().is_ascii_lowercase() {
++                    return Err(());
++                }
++
++                // Restrict the set of characters permitted in a custom vendor.
++                if custom
++                    .find(|c: char| {
++                        !(c.is_ascii_lowercase() || c.is_ascii_digit() || c == '_' || c == '.')
++                    })
++                    .is_some()
++                {
++                    return Err(());
++                }
++
++                Vendor::Custom(Box::new(custom.to_owned()))
++            }
+         })
+     }
+ }
+@@ -1120,4 +1171,57 @@ mod tests {
+         assert_eq!(t.environment, Environment::Eabihf);
+         assert_eq!(t.binary_format, BinaryFormat::Elf);
+     }
++
++    #[test]
++    fn custom_vendors() {
++        assert!(Triple::from_str("x86_64--linux").is_err());
++        assert!(Triple::from_str("x86_64-42-linux").is_err());
++        assert!(Triple::from_str("x86_64-__customvendor__-linux").is_err());
++        assert!(Triple::from_str("x86_64-^-linux").is_err());
++        assert!(Triple::from_str("x86_64- -linux").is_err());
++        assert!(Triple::from_str("x86_64-CustomVendor-linux").is_err());
++        assert!(Triple::from_str("x86_64-linux-linux").is_err());
++        assert!(Triple::from_str("x86_64-x86_64-linux").is_err());
++        assert!(Triple::from_str("x86_64-elf-linux").is_err());
++        assert!(Triple::from_str("x86_64-gnu-linux").is_err());
++        assert!(Triple::from_str("x86_64-linux-customvendor").is_err());
++        assert!(Triple::from_str("customvendor").is_err());
++        assert!(Triple::from_str("customvendor-x86_64").is_err());
++        assert!(Triple::from_str("x86_64-").is_err());
++        assert!(Triple::from_str("x86_64--").is_err());
++
++        let t = Triple::from_str("x86_64-customvendor-linux")
++            .expect("can't parse target with custom vendor");
++        assert_eq!(t.architecture, Architecture::X86_64);
++        assert_eq!(
++            t.vendor,
++            Vendor::Custom(Box::new(String::from_str("customvendor").unwrap()))
++        );
++        assert_eq!(t.operating_system, OperatingSystem::Linux);
++        assert_eq!(t.environment, Environment::Unknown);
++        assert_eq!(t.binary_format, BinaryFormat::Elf);
++        assert_eq!(t.to_string(), "x86_64-customvendor-linux");
++
++        let t = Triple::from_str("x86_64-customvendor")
++            .expect("can't parse target with custom vendor");
++        assert_eq!(t.architecture, Architecture::X86_64);
++        assert_eq!(
++            t.vendor,
++            Vendor::Custom(Box::new(String::from_str("customvendor").unwrap()))
++        );
++        assert_eq!(t.operating_system, OperatingSystem::Unknown);
++        assert_eq!(t.environment, Environment::Unknown);
++        assert_eq!(t.binary_format, BinaryFormat::Unknown);
++
++        assert_eq!(
++            Triple::from_str("unknown-foo"),
++            Ok(Triple {
++                architecture: Architecture::Unknown,
++                vendor: Vendor::Custom(Box::new(String::from_str("foo").unwrap())),
++                operating_system: OperatingSystem::Unknown,
++                environment: Environment::Unknown,
++                binary_format: BinaryFormat::Unknown,
++            })
++        );
++    }
+ }
+diff --git a/src/triple.rs b/src/triple.rs
+index 36dcd9a..1abda26 100644
+--- a/third_party/rust/target-lexicon.0.9.0/src/triple.rs
++++ b/third_party/rust/target-lexicon-0.9.0/src/triple.rs
+@@ -322,10 +322,6 @@ mod tests {
+             Triple::from_str("foo"),
+             Err(ParseError::UnrecognizedArchitecture("foo".to_owned()))
+         );
+-        assert_eq!(
+-            Triple::from_str("unknown-foo"),
+-            Err(ParseError::UnrecognizedVendor("foo".to_owned()))
+-        );
+         assert_eq!(
+             Triple::from_str("unknown-unknown-foo"),
+             Err(ParseError::UnrecognizedOperatingSystem("foo".to_owned()))
+
+From 6f90d7274dce4e7f9bb120f6b36cf26881bde9a7 Mon Sep 17 00:00:00 2001
+From: Dan Gohman <sunfish@mozilla.com>
+Date: Tue, 5 Nov 2019 10:33:56 -0800
+Subject: [PATCH 2/7] Add more tests.
+
+---
+ src/targets.rs | 30 ++++++++++++++++++++++++++++--
+ 1 file changed, 28 insertions(+), 2 deletions(-)
+
+diff --git a/src/targets.rs b/src/targets.rs
+index 90b2736..7d1f069 100644
+--- a/third_party/rust/target-lexicon-0.9.0/src/targets.rs
++++ b/third_party/rust/target-lexicon-0.9.0/src/targets.rs
+@@ -1174,6 +1174,7 @@ mod tests {
+ 
+     #[test]
+     fn custom_vendors() {
++        // Test various invalid cases.
+         assert!(Triple::from_str("x86_64--linux").is_err());
+         assert!(Triple::from_str("x86_64-42-linux").is_err());
+         assert!(Triple::from_str("x86_64-__customvendor__-linux").is_err());
+@@ -1190,6 +1191,31 @@ mod tests {
+         assert!(Triple::from_str("x86_64-").is_err());
+         assert!(Triple::from_str("x86_64--").is_err());
+ 
++        // Test various Unicode things.
++        assert!(
++            Triple::from_str("x86_64-𝓬𝓾𝓼𝓽𝓸𝓶𝓿𝓮𝓷𝓭𝓸𝓻-linux").is_err(),
++            "unicode font hazard"
++        );
++        assert!(
++            Triple::from_str("x86_64-ćúśtőḿvéńdőŕ-linux").is_err(),
++            "diacritical mark stripping hazard"
++        );
++        assert!(
++            Triple::from_str("x86_64-customvendοr-linux").is_err(),
++            "homoglyph hazard"
++        );
++        assert!(Triple::from_str("x86_64-customvendor-linux").is_ok());
++        assert!(
++            Triple::from_str("x86_64-ffi-linux").is_err(),
++            "normalization hazard"
++        );
++        assert!(Triple::from_str("x86_64-ffi-linux").is_ok());
++        assert!(
++            Triple::from_str("x86_64-custom‍vendor-linux").is_err(),
++            "zero-width character hazard"
++        );
++
++        // Test some valid cases.
+         let t = Triple::from_str("x86_64-customvendor-linux")
+             .expect("can't parse target with custom vendor");
+         assert_eq!(t.architecture, Architecture::X86_64);
+@@ -1202,8 +1228,8 @@ mod tests {
+         assert_eq!(t.binary_format, BinaryFormat::Elf);
+         assert_eq!(t.to_string(), "x86_64-customvendor-linux");
+ 
+-        let t = Triple::from_str("x86_64-customvendor")
+-            .expect("can't parse target with custom vendor");
++        let t =
++            Triple::from_str("x86_64-customvendor").expect("can't parse target with custom vendor");
+         assert_eq!(t.architecture, Architecture::X86_64);
+         assert_eq!(
+             t.vendor,
+
+From c0e318b3c1be2d1965579f07dd563fb9cc0c4eb1 Mon Sep 17 00:00:00 2001
+From: Dan Gohman <sunfish@mozilla.com>
+Date: Tue, 5 Nov 2019 12:56:31 -0800
+Subject: [PATCH 3/7] Use `.chars().any(...)` instead of
+ `.find(...).is_some()`.
+
+---
+ src/targets.rs | 9 +++------
+ 1 file changed, 3 insertions(+), 6 deletions(-)
+
+diff --git a/src/targets.rs b/src/targets.rs
+index 7d1f069..1078dd3 100644
+--- a/third_party/rust/target-lexicon-0.9.0/src/targets.rs
++++ b/third_party/rust/target-lexicon/src-0.9.0/targets.rs
+@@ -779,12 +779,9 @@ impl FromStr for Vendor {
+                 }
+ 
+                 // Restrict the set of characters permitted in a custom vendor.
+-                if custom
+-                    .find(|c: char| {
+-                        !(c.is_ascii_lowercase() || c.is_ascii_digit() || c == '_' || c == '.')
+-                    })
+-                    .is_some()
+-                {
++                if custom.chars().any(|c: char| {
++                    !(c.is_ascii_lowercase() || c.is_ascii_digit() || c == '_' || c == '.')
++                }) {
+                     return Err(());
+                 }
+ 
+
+From f319950528654c772193d9eb3bf40bc8df35fcae Mon Sep 17 00:00:00 2001
+From: Dan Gohman <sunfish@mozilla.com>
+Date: Thu, 7 Nov 2019 15:15:48 -0800
+Subject: [PATCH 4/7] Fix build.rs to generate the correct code to build
+ Vendors.
+
+---
+ build.rs | 14 ++++++++++++--
+ 1 file changed, 12 insertions(+), 2 deletions(-)
+
+diff --git a/build.rs b/build.rs
+index a0ba3b7..446f9e7 100644
+--- a/third_party/rust/target-lexicon-0.9.0/build.rs
++++ b/third_party/rust/target-lexicon-0.9.0/build.rs
+@@ -32,6 +32,7 @@ mod parse_error {
+     }
+ }
+ 
++use self::targets::Vendor;
+ use self::triple::Triple;
+ 
+ fn main() {
+@@ -60,7 +61,7 @@ fn write_host_rs(mut out: File, triple: Triple) -> io::Result<()> {
+         "    architecture: Architecture::{:?},",
+         triple.architecture
+     )?;
+-    writeln!(out, "    vendor: Vendor::{:?},", triple.vendor)?;
++    writeln!(out, "    vendor: {},", vendor_display(&triple.vendor))?;
+     writeln!(
+         out,
+         "    operating_system: OperatingSystem::{:?},",
+@@ -90,7 +91,7 @@ fn write_host_rs(mut out: File, triple: Triple) -> io::Result<()> {
+     writeln!(out, "impl Vendor {{")?;
+     writeln!(out, "    /// Return the vendor for the current host.")?;
+     writeln!(out, "    pub const fn host() -> Self {{")?;
+-    writeln!(out, "        Vendor::{:?}", triple.vendor)?;
++    writeln!(out, "        {}", vendor_display(&triple.vendor))?;
+     writeln!(out, "    }}")?;
+     writeln!(out, "}}")?;
+     writeln!(out)?;
+@@ -160,3 +161,12 @@ fn write_host_rs(mut out: File, triple: Triple) -> io::Result<()> {
+ 
+     Ok(())
+ }
++
++fn vendor_display(vendor: &Vendor) -> String {
++    match vendor {
++        Vendor::Custom(custom) => {
++            format!("Vendor::Custom(Box::new(String::from_str({:?})))", custom)
++        }
++        known => format!("Vendor::{:?}", known),
++    }
++}
+
+From e558f6934535be3b8ccc9a99a33e861cb7431dfe Mon Sep 17 00:00:00 2001
+From: Dan Gohman <sunfish@mozilla.com>
+Date: Fri, 8 Nov 2019 12:10:34 -0800
+Subject: [PATCH 5/7] Fix custom vendors in `const fn` contexts.
+
+---
+ build.rs       | 15 +++++++++++----
+ src/lib.rs     |  4 ++--
+ src/targets.rs | 51 ++++++++++++++++++++++++++++++++++++++++++--------
+ 3 files changed, 56 insertions(+), 14 deletions(-)
+
+diff --git a/build.rs b/build.rs
+index 446f9e7..e88206e 100644
+--- a/third_party/rust/target-lexicon-0.9.0/build.rs
++++ b/third_party/rust/target-lexicon-0.9.0/build.rs
+@@ -53,6 +53,8 @@ fn write_host_rs(mut out: File, triple: Triple) -> io::Result<()> {
+     writeln!(out, "use crate::Aarch64Architecture::*;")?;
+     writeln!(out, "#[allow(unused_imports)]")?;
+     writeln!(out, "use crate::ArmArchitecture::*;")?;
++    writeln!(out, "#[allow(unused_imports)]")?;
++    writeln!(out, "use crate::CustomVendor;")?;
+     writeln!(out)?;
+     writeln!(out, "/// The `Triple` of the current host.")?;
+     writeln!(out, "pub const HOST: Triple = Triple {{")?;
+@@ -139,7 +141,11 @@ fn write_host_rs(mut out: File, triple: Triple) -> io::Result<()> {
+         "            architecture: Architecture::{:?},",
+         triple.architecture
+     )?;
+-    writeln!(out, "            vendor: Vendor::{:?},", triple.vendor)?;
++    writeln!(
++        out,
++        "            vendor: {},",
++        vendor_display(&triple.vendor)
++    )?;
+     writeln!(
+         out,
+         "            operating_system: OperatingSystem::{:?},",
+@@ -164,9 +170,10 @@ fn write_host_rs(mut out: File, triple: Triple) -> io::Result<()> {
+ 
+ fn vendor_display(vendor: &Vendor) -> String {
+     match vendor {
+-        Vendor::Custom(custom) => {
+-            format!("Vendor::Custom(Box::new(String::from_str({:?})))", custom)
+-        }
++        Vendor::Custom(custom) => format!(
++            "Vendor::Custom(CustomVendor::Static({:?}))",
++            custom.as_str()
++        ),
+         known => format!("Vendor::{:?}", known),
+     }
+ }
+diff --git a/src/lib.rs b/src/lib.rs
+index 8d6da8d..70f6488 100644
+--- a/third_party/rust/target-lexicon-0.9.0/src/lib.rs
++++ b/third_party/rust/target-lexicon-0.9.0/src/lib.rs
+@@ -28,7 +28,7 @@ mod triple;
+ pub use self::host::HOST;
+ pub use self::parse_error::ParseError;
+ pub use self::targets::{
+-    Aarch64Architecture, Architecture, ArmArchitecture, BinaryFormat, Environment, OperatingSystem,
+-    Vendor,
++    Aarch64Architecture, Architecture, ArmArchitecture, BinaryFormat, CustomVendor, Environment,
++    OperatingSystem, Vendor,
+ };
+ pub use self::triple::{CallingConvention, Endianness, PointerWidth, Triple};
+diff --git a/src/targets.rs b/src/targets.rs
+index 1078dd3..7152020 100644
+--- a/third_party/rust/target-lexicon-0.9.0/src/targets.rs
++++ b/third_party/rust/target-lexicon-0.9.0/src/targets.rs
+@@ -4,6 +4,7 @@ use crate::triple::{Endianness, PointerWidth, Triple};
+ use alloc::boxed::Box;
+ use alloc::string::String;
+ use core::fmt;
++use core::hash::{Hash, Hasher};
+ use core::str::FromStr;
+ 
+ /// The "architecture" field, which in some cases also specifies a specific
+@@ -292,6 +293,39 @@ impl Aarch64Architecture {
+     }
+ }
+ 
++/// A string for a `Vendor::Custom` that can either be used in `const`
++/// contexts or hold dynamic strings.
++#[derive(Clone, Debug, Eq)]
++pub enum CustomVendor {
++    /// An owned `String`. This supports the general case.
++    Owned(Box<String>),
++    /// A static `str`, so that `CustomVendor` can be constructed in `const`
++    /// contexts.
++    Static(&'static str),
++}
++
++impl CustomVendor {
++    /// Extracts a string slice.
++    pub fn as_str(&self) -> &str {
++        match self {
++            CustomVendor::Owned(s) => s,
++            CustomVendor::Static(s) => s,
++        }
++    }
++}
++
++impl PartialEq for CustomVendor {
++    fn eq(&self, other: &Self) -> bool {
++        self.as_str() == other.as_str()
++    }
++}
++
++impl Hash for CustomVendor {
++    fn hash<H: Hasher>(&self, state: &mut H) {
++        self.as_str().hash(state)
++    }
++}
++
+ /// The "vendor" field, which in practice is little more than an arbitrary
+ /// modifier.
+ #[derive(Clone, Debug, PartialEq, Eq, Hash)]
+@@ -316,7 +350,7 @@ pub enum Vendor {
+     ///
+     /// Outside of such patched environments, users of `target-lexicon` should
+     /// treat `Custom` the same as `Unknown` and ignore the string.
+-    Custom(Box<String>),
++    Custom(CustomVendor),
+ }
+ 
+ /// The "operating system" field, which sometimes implies an environment, and
+@@ -728,7 +762,7 @@ impl fmt::Display for Vendor {
+             Vendor::Sun => "sun",
+             Vendor::Uwp => "uwp",
+             Vendor::Wrs => "wrs",
+-            Vendor::Custom(ref name) => name,
++            Vendor::Custom(ref name) => name.as_str(),
+         };
+         f.write_str(s)
+     }
+@@ -779,13 +813,14 @@ impl FromStr for Vendor {
+                 }
+ 
+                 // Restrict the set of characters permitted in a custom vendor.
+-                if custom.chars().any(|c: char| {
++                fn is_prohibited_char(c: char) -> bool {
+                     !(c.is_ascii_lowercase() || c.is_ascii_digit() || c == '_' || c == '.')
+-                }) {
++                }
++                if custom.chars().any(is_prohibited_char) {
+                     return Err(());
+                 }
+ 
+-                Vendor::Custom(Box::new(custom.to_owned()))
++                Vendor::Custom(CustomVendor::Owned(Box::new(custom.to_owned())))
+             }
+         })
+     }
+@@ -1218,7 +1253,7 @@ mod tests {
+         assert_eq!(t.architecture, Architecture::X86_64);
+         assert_eq!(
+             t.vendor,
+-            Vendor::Custom(Box::new(String::from_str("customvendor").unwrap()))
++            Vendor::Custom(CustomVendor::Static("customvendor"))
+         );
+         assert_eq!(t.operating_system, OperatingSystem::Linux);
+         assert_eq!(t.environment, Environment::Unknown);
+@@ -1230,7 +1265,7 @@ mod tests {
+         assert_eq!(t.architecture, Architecture::X86_64);
+         assert_eq!(
+             t.vendor,
+-            Vendor::Custom(Box::new(String::from_str("customvendor").unwrap()))
++            Vendor::Custom(CustomVendor::Static("customvendor"))
+         );
+         assert_eq!(t.operating_system, OperatingSystem::Unknown);
+         assert_eq!(t.environment, Environment::Unknown);
+@@ -1240,7 +1275,7 @@ mod tests {
+             Triple::from_str("unknown-foo"),
+             Ok(Triple {
+                 architecture: Architecture::Unknown,
+-                vendor: Vendor::Custom(Box::new(String::from_str("foo").unwrap())),
++                vendor: Vendor::Custom(CustomVendor::Static("foo")),
+                 operating_system: OperatingSystem::Unknown,
+                 environment: Environment::Unknown,
+                 binary_format: BinaryFormat::Unknown,
+
+From bc4b444133b8a5e56602f7c77c10ef3f1e7a7c78 Mon Sep 17 00:00:00 2001
+From: Dan Gohman <sunfish@mozilla.com>
+Date: Mon, 18 Nov 2019 13:45:58 -0800
+Subject: [PATCH 6/7] Add a testcase with a BOM too, just in case.
+
+---
+ src/targets.rs | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/src/targets.rs b/src/targets.rs
+index 7152020..9a4d990 100644
+--- a/third_party/rust/target-lexicon-0.9.0/src/targets.rs
++++ b/third_party/rust/target-lexicon-0.9.0/src/targets.rs
+@@ -1246,6 +1246,10 @@ mod tests {
+             Triple::from_str("x86_64-custom‍vendor-linux").is_err(),
+             "zero-width character hazard"
+         );
++        assert!(
++            Triple::from_str("x86_64-customvendor-linux").is_err(),
++            "BOM hazard"
++        );
+ 
+         // Test some valid cases.
+         let t = Triple::from_str("x86_64-customvendor-linux")
+
+From 721fbbe1c9cfd3adc9aaf011c62d6a36078f4133 Mon Sep 17 00:00:00 2001
+From: Dan Gohman <sunfish@mozilla.com>
+Date: Mon, 18 Nov 2019 20:56:40 -0800
+Subject: [PATCH 7/7] Use an anonymous function instead of just a local
+ function.
+
+---
+ src/targets.rs | 5 ++---
+ 1 file changed, 2 insertions(+), 3 deletions(-)
+
+diff --git a/src/targets.rs b/src/targets.rs
+index 9a4d990..eb5a088 100644
+--- a/third_party/rust/target-lexicon-0.9.0/src/targets.rs
++++ b/third_party/rust/target-lexicon-0.9.0/src/targets.rs
+@@ -813,10 +813,9 @@ impl FromStr for Vendor {
+                 }
+ 
+                 // Restrict the set of characters permitted in a custom vendor.
+-                fn is_prohibited_char(c: char) -> bool {
++                if custom.chars().any(|c: char| {
+                     !(c.is_ascii_lowercase() || c.is_ascii_digit() || c == '_' || c == '.')
+-                }
+-                if custom.chars().any(is_prohibited_char) {
++                }) {
+                     return Err(());
+                 }
+ 
diff --git a/heavybuilds/firefox/avoid-redefinition.patch b/heavybuilds/firefox/avoid-redefinition.patch
new file mode 100644
index 0000000..af11c50
--- /dev/null
+++ b/heavybuilds/firefox/avoid-redefinition.patch
@@ -0,0 +1,15 @@
+Author: Rasmus Thomsen <oss@cogitri.dev>
+Reason: FF is mixing userspace net headers (net/if.h) and kernelspace ones
+(linux/if.h), leading to redefinitions. We need to include net/if.h before
+linux/if.h because linux/if.h has redifinition guards whereas net/if.h doesnt
+Upstream: No
+--- a/dom/media/webrtc/transport/third_party/nICEr/src/stun/addrs-netlink.c.orig	2020-07-28 19:24:32.359751046 +0200
++++ b/dom/media/webrtc/transport/third_party/nICEr/src/stun/addrs-netlink.c	2020-07-28 19:24:37.856343751 +0200
+@@ -31,6 +31,7 @@
+ */
+ 
+ #if defined(LINUX)
++#include <net/if.h>
+ #include "addrs-netlink.h"
+ #include <csi_platform.h>
+ #include <assert.h>
diff --git a/heavybuilds/firefox/disable-moz-stackwalk.patch b/heavybuilds/firefox/disable-moz-stackwalk.patch
new file mode 100644
index 0000000..b6bc756
--- /dev/null
+++ b/heavybuilds/firefox/disable-moz-stackwalk.patch
@@ -0,0 +1,18 @@
+diff --git a/mozglue/misc/StackWalk.cpp b/mozglue/misc/StackWalk.cpp
+index 7d62921..adcfa44 100644
+--- a/mozglue/misc/StackWalk.cpp
++++ b/mozglue/misc/StackWalk.cpp
+@@ -33,13 +33,7 @@ using namespace mozilla;
+ #  define MOZ_STACKWALK_SUPPORTS_MACOSX 0
+ #endif
+ 
+-#if (defined(linux) &&                                            \
+-     ((defined(__GNUC__) && (defined(__i386) || defined(PPC))) || \
+-      defined(HAVE__UNWIND_BACKTRACE)))
+-#  define MOZ_STACKWALK_SUPPORTS_LINUX 1
+-#else
+ #  define MOZ_STACKWALK_SUPPORTS_LINUX 0
+-#endif
+ 
+ #if __GLIBC__ > 2 || (__GLIBC__ == 2 && __GLIBC_MINOR__ >= 1)
+ #  define HAVE___LIBC_STACK_END 1
diff --git a/heavybuilds/firefox/disable-neon-in-aom.patch b/heavybuilds/firefox/disable-neon-in-aom.patch
new file mode 100644
index 0000000..6df05a1
--- /dev/null
+++ b/heavybuilds/firefox/disable-neon-in-aom.patch
@@ -0,0 +1,39 @@
+Firefox (75) and AOM itself fail to build with NEON enabled. As such
+we should disable it for now.
+
+In file included from /home/buildozer/aports/community/firefox/src/firefox-75.0/third_party/aom/aom_dsp/arm/blend_a64_mask_neon.c:12:
+/home/buildozer/aports/community/firefox/src/firefox-75.0/third_party/aom/av1/common/arm/mem_neon.h: In function 'load_u8_8x8':
+/usr/lib/gcc/armv7-alpine-linux-musleabihf/9.3.0/include/arm_neon.h:10303:1: error: inlining failed in call to always_inline 'vld1_u8': target specific option mismatch
+10303 | vld1_u8 (const uint8_t * __a)
+      | ^~~~~~~
+--- a/media/libaom/moz.build	2020-04-09 08:20:14.608439591 +0200
++++ b/media/libaom/moz.build	2020-04-09 08:20:21.801745246 +0200
+@@ -42,26 +42,6 @@
+         ASFLAGS += [ '-I%s/media/libaom/config/linux/ia32/' % TOPSRCDIR ]
+         LOCAL_INCLUDES += [ '/media/libaom/config/linux/ia32/' ]
+         EXPORTS.aom += [ 'config/linux/ia32/config/aom_config.h' ]
+-elif CONFIG['CPU_ARCH'] == 'arm':
+-    EXPORTS.aom += files['ARM_EXPORTS']
+-    ASFLAGS += [
+-        '-I%s/media/libaom/config/linux/arm/' % TOPSRCDIR,
+-        '-I%s/libaom' % OBJDIR,
+-    ]
+-    LOCAL_INCLUDES += [ '/media/libaom/config/linux/arm/' ]
+-    EXPORTS.aom += [ 'config/linux/arm/config/aom_config.h' ]
+-
+-    SOURCES += files['ARM_SOURCES']
+-
+-    for f in SOURCES:
+-        if f.endswith('neon.c'):
+-            SOURCES[f].flags += CONFIG['VPX_ASFLAGS']
+-
+-    if CONFIG['OS_TARGET'] == 'Android':
+-        # For cpu-features.h
+-        LOCAL_INCLUDES += [
+-            '%%%s/sources/android/cpufeatures' % CONFIG['ANDROID_NDK'],
+-        ]
+ else:
+     # Generic C-only configuration
+     EXPORTS.aom += files['GENERIC_EXPORTS']
+
+
diff --git a/heavybuilds/firefox/firefox b/heavybuilds/firefox/firefox
new file mode 100755
index 0000000..fa0d9d3
--- /dev/null
+++ b/heavybuilds/firefox/firefox
@@ -0,0 +1,2 @@
+#!/bin/sh
+LD_LIBRARY_PATH="/lib/firefox" /lib/firefox/firefox
diff --git a/heavybuilds/firefox/firefox.SMBuild b/heavybuilds/firefox/firefox.SMBuild
new file mode 100755
index 0000000..cf15c49
--- /dev/null
+++ b/heavybuilds/firefox/firefox.SMBuild
@@ -0,0 +1,158 @@
+app=firefox
+version=91.11.0
+build=1sml
+homepage="http://www.mozilla.org/projects/firefox/"
+download="https://archive.mozilla.org/pub/firefox/releases/91.11.0esr/source/firefox-91.11.0esr.source.tar.xz"
+desc="Web browser from mozilla.org based on Gecko engine"
+requires="zip unzip yasm libevent alsa-lib libpng icu hunspell python3 diffutils llvm imake libxt gtk3 dbus-glib ffmpeg clang nodejs mozilla-nss lld"
+
+build() {
+  mkandenterbuilddir
+  rm -rf $app-$version
+
+  tar xf $srcdir/$app-"$version"esr.source.tar.?z
+  cd $app-$version
+  fixbuilddirpermissions
+
+  # We require gcc 9+ if we have to use the lld linker.
+
+  # I don't know of a proper way to point this project to the GCC headers
+  # location that the toolchain comes with. So I've put all the GCC headers
+  # in /usr/local/include
+
+  # In case of firefox, old habits die hard. This thing still depends on autoconf 2.13
+  mkdir -p AC213
+  tar xf "$srcdir"/autoconf-2.13.tar.gz
+  cd autoconf-2.13
+  ./configure --prefix="$PWD"/../AC213 --program-suffix=-2.13
+  make && make install
+  cd ..
+  export PATH="$PWD"/AC213/bin:"$PATH"
+
+  applypatch $srcdir/allow-custom-rust-vendor.patch
+  applypatch $srcdir/avoid-redefinition.patch
+  applypatch $srcdir/disable-moz-stackwalk.patch
+  applypatch $srcdir/disable-neon-in-aom.patch
+  applypatch $srcdir/fix-arm-opus-include.patch
+  applypatch $srcdir/fix-fortify-system-wrappers.patch
+  applypatch $srcdir/fix-tools.patch
+  applypatch $srcdir/fix-webrtc-glibcisms.patch
+  applypatch $srcdir/mallinfo.patch
+  applypatch $srcdir/sandbox-fork.patch
+  applypatch $srcdir/sandbox-largefile.patch
+  applypatch $srcdir/sandbox-sched_setscheduler.patch
+  applypatch $srcdir/symboltable.patch
+
+  export SHELL=/bin/sh 
+  export build_OFFICIAL=1 
+  export MOZILLA_OFFICIAL=1
+  export MACH_USE_SYSTEM_PYTHON=1
+  export USE_SHORT_LIBNAME=1
+  export RUST_TARGET="$arch-unknown-linux-musl"
+  # Thanks slackware. This reduces memory consumption issues when rust objects are compiled
+  export RUSTFLAGS="-Cdebuginfo=0"
+
+  cp $srcdir/stab.h toolkit/crashreporter/google-breakpad/src/
+
+  _clear_vendor_checksums() {
+    sed -i 's/\("files":{\)[^}]*/\1/' third_party/rust/$1/.cargo-checksum.json
+  }
+
+  _clear_vendor_checksums audio_thread_priority
+  _clear_vendor_checksums target-lexicon-0.9.0
+
+  unset MAKEFLAGS
+  export BINDGEN_CFLAGS="--sysroot="/" --target="$arch-linux-musl""
+
+  # Go easy on the pi
+  if [ "$arch" = "aarch64" ] ; then 
+    MAKEFLAGS="-j2"
+  fi
+
+  cd build
+
+  ../mach configure \
+    --prefix="" \
+    --libdir=/lib \
+    --enable-alsa \
+    --enable-dbus \
+    --enable-hardening \
+    --enable-official-branding \
+    --enable-release \
+    --enable-application=browser \
+    --enable-default-toolkit=cairo-gtk3 \
+    --disable-pulseaudio \
+    --disable-necko-wifi \
+    --disable-strip \
+    --disable-install-strip \
+    --disable-tests \
+    --disable-updater \
+    --disable-rust-simd \
+    --disable-crashreporter \
+    --disable-gold \
+    --disable-jemalloc \
+    --enable-optimize="-O2" \
+    --disable-profiling \
+    --enable-ffmpeg \
+    --enable-system-ffi \
+    --enable-system-pixman \
+    --with-system-icu \
+    --with-system-jpeg \
+    --with-system-libevent \
+    --with-system-libvpx \
+    --with-system-zlib \
+    --with-system-pixman \
+    --with-system-webp \
+    --with-system-nss \
+    --with-system-nspr \
+    --with-clang-path=/bin/clang \
+    --with-libclang-path=/lib \
+    --allow-addon-sideload \
+    --enable-linker=lld
+
+  # For some reason, firefox compiler is not able to find critical GCC headers
+  # for our supported architectures when using a custom toolchain like skarnet's.
+  # They are mostly located in $arch-linux-musl-$version/include/c++/$version.
+  # The compiler looks in /usr/local/include, so let's populate this directory
+  # with our own headers
+  #mkdir -p /local/include
+  #tar -xf $srcdir/aarch64-8.2.0-headers.tar.gz -C /local/include
+
+  ../mach build $MAKEFLAGS
+  DESTDIR="$pkg" ../mach install
+
+  # sabotage linux does a cleanup of the headers and the /bin/firefox
+  # script, replacing it with another script that has LD_LIBRARY_PATH set
+  # for correct detection of libs at runtime, so we follow suit
+
+  mkdir -p $pkg/bin
+  rm -rf $pkg/include $pkg/lib/firefox-devel-$version
+  rm -f $pkg/bin/firefox
+  cp $srcdir/firefox $pkg/bin/
+  chmod +x $pkg/bin/firefox
+
+  install -Dm 644 $srcdir/mozicon128.png $pkg/share/pixmaps/firefox.png
+  install -Dm 644 $srcdir/firefox.desktop $pkg/share/applications/firefox.desktop
+  install -Dm 644 $srcdir/vendor.js $pkg/lib/firefox/browser/defaults/preferences/firefox-branding.js
+
+  mkfinalpkg
+}
+
+sha512sums="
+602584f4c77b7a554aaa068eda5409b68eb0b3229e9c224bffb91c83c4314d25de15bd560a323626ff78f6df339c79e1ef8938c54b78ecadf4dc75c5241290ad  autoconf-2.13.tar.gz
+bff3a399c03bd1cdaaec0b6963b1558aa35b6338b6c02042ffd65fec0aedd344d01718692e881332f5f352c32da15ba09a20a09ee072200b47ae840bc0585a96  firefox-91.11.0esr.source.tar.xz
+4e584621145cf8add069c6dac18e805b3274a1ee402d84e924df2341f7d3c5be261a93ef51283bacbd606f47fbdc628c4323ecc31efc5b403b8d224b18dc278f  allow-custom-rust-vendor.patch
+b1cb2db3122634f66d2bae7066e76f2dcd455c464e021db4de3b0a08314df95cb667846081682db549dd2af8a00831cabe44a2420c66cdfb5e3b5fa7e6bd21d3  avoid-redefinition.patch
+454ea3263cabce099accbdc47aaf83be26a19f8b5a4568c01a7ef0384601cf8315efd86cd917f9c8bf419c2c845db89a905f3ff9a8eb0c8e41042e93aa96a85c  disable-moz-stackwalk.patch
+55eab1a02e19a19a1ee0e36b11097ab48a44200e07e543d91469967206854f39709c7c0bc31855559528e64642d610868140e9533f1c0e3bebc953353c142fa8  disable-neon-in-aom.patch
+b88b312ec14330351fe2d3aef0aef9fa0d533f46dae7ddd1288aa79fc06e9c247147769369a11387988fa0685836135bbfc24000f30d263173361b9c0c5c3c39  fix-arm-opus-include.patch
+2f4f15974d52de4bb273b62a332d13620945d284bbc6fe6bd0a1f58ff7388443bc1d3bf9c82cc31a8527aad92b0cd3a1bc41d0af5e1800e0dcbd7033e58ffd71  fix-fortify-system-wrappers.patch
+a763228d0742be7323c7b2dafff173d48e261307372ed4445a8f1d583f0cebaf125b46d0abb1daa44bb03b1dafa8026d5215f5378f58b09b674f6f380ff5777f  fix-tools.patch
+47c2c2428c3598a42f6241705179642b3378a86ace39c8c3cbef4954e6d220b42e6c76f3d71731d65f67ce2c8597259122ac44bbd45e20993bb8bc70c0c8a010  fix-webrtc-glibcisms.patch
+551676b1b2d5c34c6e66cdf52781e5f94807df1155dca5fc89b45936140368b40b374e209f18c085fd1c2034764d7eb64bd95ec8cd513f9bded43cd692cc9059  mallinfo.patch
+2518f2fc75b5db30058e0735f47d60fdf1e7adfaeee4b33fb2afb1bd9a616ce943fd88f4404d0802d4083703f4acf1d5ad42377218d025bc768807fbaf7e1609  sandbox-fork.patch
+36ce3c2f97e4b53a627d3dba48a34921eb3fe7303524b8fe59033f3d159ea48bc90869fb555b1774b532f31e5b967fbf76d0305743f462cd9036f43cba7da044  sandbox-largefile.patch
+db26757b2ebf9f567962e32294b4ae48b3a5d0378a7589dfe650fe3a179ff58befbab5082981c68e1c25fb9e56b2db1e4e510d4bca17c3e3aedbf9a2f21806eb  sandbox-sched_setscheduler.patch
+7c8584c39c8d3d2c8b0bd430fea6d835359580419e6676d06d9f5973c43222de3f314d9f42ee6a492544af5882596dba20373d8fcad9c82d0ce454aa40066e9f  symboltable.patch
+0b3f1e4b9fdc868e4738b5c81fd6c6128ce8885b260affcb9a65ff9d164d7232626ce1291aaea70132b3e3124f5e13fef4d39326b8e7173e362a823722a85127  stab.h
+"
\ No newline at end of file
diff --git a/heavybuilds/firefox/firefox.desktop b/heavybuilds/firefox/firefox.desktop
new file mode 100644
index 0000000..d3572a7
--- /dev/null
+++ b/heavybuilds/firefox/firefox.desktop
@@ -0,0 +1,12 @@
+[Desktop Entry]
+Encoding=UTF-8
+Name = Firefox Web Browser
+Comment=Browse the World Wide Web
+GenericName=Web Browser
+Exec=firefox %u
+Terminal=false
+Type=Application
+Icon=firefox
+Categories=GNOME;GTK;Network;WebBrowser;
+MimeType=application/xhtml+xml;text/xml;application/xhtml+xml;application/vnd.mozilla.xul+xml;text/mml;x-scheme-handler/http;x-scheme-handler/https;
+StartupNotify=true
diff --git a/heavybuilds/firefox/fix-arm-opus-include.patch b/heavybuilds/firefox/fix-arm-opus-include.patch
new file mode 100644
index 0000000..b0c052f
--- /dev/null
+++ b/heavybuilds/firefox/fix-arm-opus-include.patch
@@ -0,0 +1,11 @@
+--- a/media/libopus/silk/arm/arm_silk_map.c	2019-03-19 20:55:01.249609964 +0100
++++ b/media/libopus/silk/arm/arm_silk_map.c	2019-03-19 20:55:25.769400255 +0100
+@@ -28,7 +28,7 @@
+ # include "config.h"
+ #endif
+
+-#include "main_FIX.h"
++#include "../fixed/main_FIX.h"
+ #include "NSQ.h"
+ #include "SigProc_FIX.h"
+
diff --git a/heavybuilds/firefox/fix-fortify-system-wrappers.patch b/heavybuilds/firefox/fix-fortify-system-wrappers.patch
new file mode 100644
index 0000000..17cf7e3
--- /dev/null
+++ b/heavybuilds/firefox/fix-fortify-system-wrappers.patch
@@ -0,0 +1,13 @@
+The wrapper features.h gets pulled in by system headers causing thigns to
+break. We work around it by simply not wrap features.h
+
+--- ./config/system-headers.mozbuild.orig
++++ ./config/system-headers.mozbuild
+@@ -229,7 +229,6 @@
+     'execinfo.h',
+     'extras.h',
+     'fcntl.h',
+-    'features.h',
+     'fenv.h',
+     'ffi.h',
+     'fibdef.h',
diff --git a/heavybuilds/firefox/fix-tools.patch b/heavybuilds/firefox/fix-tools.patch
new file mode 100644
index 0000000..94de423
--- /dev/null
+++ b/heavybuilds/firefox/fix-tools.patch
@@ -0,0 +1,13 @@
+--- a/tools/profiler/core/platform-linux-android.cpp	2019-01-29 12:09:40.980448579 +0100
++++ b/tools/profiler/core/platform-linux-android.cpp	2019-01-29 12:11:09.689590967 +0100
+@@ -497,8 +501,10 @@
+ ucontext_t sSyncUContext;
+ 
+ void Registers::SyncPopulate() {
++#if defined(__GLIBC__)
+   if (!getcontext(&sSyncUContext)) {
+     PopulateRegsFromContext(*this, &sSyncUContext);
+   }
++#endif
+ }
+ #endif
diff --git a/heavybuilds/firefox/fix-webrtc-glibcisms.patch b/heavybuilds/firefox/fix-webrtc-glibcisms.patch
new file mode 100644
index 0000000..7533d94
--- /dev/null
+++ b/heavybuilds/firefox/fix-webrtc-glibcisms.patch
@@ -0,0 +1,20 @@
+--- ./third_party/libwebrtc/webrtc/system_wrappers/source/cpu_features_linux.c.orig	2018-05-09 23:48:44.677389171 +0200
++++ ./third_party/libwebrtc/webrtc/system_wrappers/source/cpu_features_linux.c	2018-05-09 23:48:56.254373557 +0200
+@@ -14,7 +14,7 @@
+ #ifndef __GLIBC_PREREQ
+ #define __GLIBC_PREREQ(a, b) 0
+ #endif
+-#if __GLIBC_PREREQ(2, 16)
++#if !__GLIBC__ || __GLIBC_PREREQ(2, 16)
+ #include <sys/auxv.h>
+ #else
+ #include <fcntl.h>
+@@ -32,7 +32,7 @@
+   int architecture = 0;
+   unsigned long hwcap = 0;
+   const char* platform = NULL;
+-#if __GLIBC_PREREQ(2, 16)
++#if !__GLIBC__ || __GLIBC_PREREQ(2, 16)
+   hwcap = getauxval(AT_HWCAP);
+   platform = (const char*)getauxval(AT_PLATFORM);
+ #else
diff --git a/heavybuilds/firefox/mallinfo.patch b/heavybuilds/firefox/mallinfo.patch
new file mode 100644
index 0000000..0d70430
--- /dev/null
+++ b/heavybuilds/firefox/mallinfo.patch
@@ -0,0 +1,34 @@
+--- a/xpcom/base/nsMemoryReporterManager.cpp	2019-03-19 17:12:20.844810044 +0100
++++ b/xpcom/base/nsMemoryReporterManager.cpp	2019-03-19 17:13:32.505133615 +0100
+@@ -123,6 +123,7 @@
+   return GetProcSelfSmapsPrivate(aN);
+ }
+ 
++#ifdef __GLIBC__
+ #  ifdef HAVE_MALLINFO
+ #    define HAVE_SYSTEM_HEAP_REPORTER 1
+ static MOZ_MUST_USE nsresult SystemHeapSize(int64_t* aSizeOut) {
+@@ -142,6 +143,7 @@
+   return NS_OK;
+ }
+ #  endif
++#endif // __GLIBC__
+ 
+ #elif defined(__DragonFly__) || defined(__FreeBSD__) || defined(__NetBSD__) || \
+     defined(__OpenBSD__) || defined(__FreeBSD_kernel__)
+@@ -642,6 +644,7 @@
+   return NS_OK;
+ }
+ 
++#ifdef __GLIBC__
+ #  define HAVE_SYSTEM_HEAP_REPORTER 1
+ // Windows can have multiple separate heaps. During testing there were multiple
+ // heaps present but the non-default ones had sizes no more than a few 10s of
+@@ -698,6 +701,7 @@
+   *aSizeOut = heapsSize;
+   return NS_OK;
+ }
++#endif // __GLIBC__
+ 
+ struct SegmentKind {
+   DWORD mState;
diff --git a/heavybuilds/firefox/mozicon128.png b/heavybuilds/firefox/mozicon128.png
new file mode 100644
index 0000000..946c31e
Binary files /dev/null and b/heavybuilds/firefox/mozicon128.png differ
diff --git a/heavybuilds/firefox/sandbox-fork.patch b/heavybuilds/firefox/sandbox-fork.patch
new file mode 100644
index 0000000..c7222ab
--- /dev/null
+++ b/heavybuilds/firefox/sandbox-fork.patch
@@ -0,0 +1,15 @@
+make SYS_fork non-fatal, musl uses it for fork(2)
+
+--- a/security/sandbox/linux/SandboxFilter.cpp
++++ b/security/sandbox/linux/SandboxFilter.cpp
+@@ -1253,6 +1253,10 @@
+         // usually do something reasonable on error.
+       case __NR_clone:
+         return ClonePolicy(Error(EPERM));
++#ifdef __NR_fork
++      case __NR_fork:
++        return Error(ENOSYS);
++#endif
+ 
+ #  ifdef __NR_fadvise64
+       case __NR_fadvise64:
diff --git a/heavybuilds/firefox/sandbox-largefile.patch b/heavybuilds/firefox/sandbox-largefile.patch
new file mode 100644
index 0000000..6ee7f3a
--- /dev/null
+++ b/heavybuilds/firefox/sandbox-largefile.patch
@@ -0,0 +1,17 @@
+--- a/security/sandbox/linux/SandboxFilter.cpp	2020-11-23 22:41:14.556378950 +0100
++++ b/security/sandbox/linux/SandboxFilter.cpp	2020-11-23 22:40:23.595806444 +0100
+@@ -68,7 +68,13 @@
+ 
+ // The headers define O_LARGEFILE as 0 on x86_64, but we need the
+ // actual value because it shows up in file flags.
+-#define O_LARGEFILE_REAL 00100000
++#if defined(__x86_64__) || defined(__i386__) || defined(__mips__)
++#define O_LARGEFILE_REAL 0100000
++#elif defined(__powerpc__)
++#define O_LARGEFILE_REAL 0200000
++#else
++#define O_LARGEFILE_REAL O_LARGEFILE
++#endif
+ 
+ // Not part of UAPI, but userspace sees it in F_GETFL; see bug 1650751.
+ #define FMODE_NONOTIFY 0x4000000
diff --git a/heavybuilds/firefox/sandbox-sched_setscheduler.patch b/heavybuilds/firefox/sandbox-sched_setscheduler.patch
new file mode 100644
index 0000000..1db645a
--- /dev/null
+++ b/heavybuilds/firefox/sandbox-sched_setscheduler.patch
@@ -0,0 +1,23 @@
+upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1657849
+diff --git a/security/sandbox/linux/SandboxFilter.cpp b/security/sandbox/linux/SandboxFilter.cpp
+index 27da4e7..5a607a4 100644
+--- a/security/sandbox/linux/SandboxFilter.cpp
++++ b/security/sandbox/linux/SandboxFilter.cpp
+@@ -1455,6 +1455,7 @@ class GMPSandboxPolicy : public SandboxPolicyCommon {
+         return Trap(OpenTrap, mFiles);
+ 
+       case __NR_brk:
++      case __NR_sched_setscheduler:
+       // Because Firefox on glibc resorts to the fallback implementation
+       // mentioned in bug 1576006, we must explicitly allow the get*id()
+       // functions in order to use NSS in the clearkey CDM.
+@@ -1467,8 +1468,7 @@ class GMPSandboxPolicy : public SandboxPolicyCommon {
+       case __NR_sched_get_priority_max:
+         return Allow();
+       case __NR_sched_getparam:
+-      case __NR_sched_getscheduler:
+-      case __NR_sched_setscheduler: {
++      case __NR_sched_getscheduler: {
+         Arg<pid_t> pid(0);
+         return If(pid == 0, Allow()).Else(Trap(SchedTrap, nullptr));
+       }
diff --git a/heavybuilds/firefox/slack-desc b/heavybuilds/firefox/slack-desc
new file mode 100644
index 0000000..77f369e
--- /dev/null
+++ b/heavybuilds/firefox/slack-desc
@@ -0,0 +1,19 @@
+# HOW TO EDIT THIS FILE:
+# The "handy ruler" below makes it easier to edit a package description.  Line
+# up the first '|' above the ':' following the base package name, and the '|' on
+# the right side marks the last column you can put a character in.  You must make
+# exactly 11 lines for the formatting to be correct.  It's also customary to
+# leave one space after the ':'.
+
+               |-----handy-ruler------------------------------------------------------|
+firefox: firefox (Mozilla Firefox Web browser)
+firefox:
+firefox: This project is a redesign of the Mozilla browser component written
+firefox: using the XUL user interface language.  Firefox empowers you to
+firefox: browse faster, more safely and more efficiently than with any other
+firefox: browser.
+firefox:
+firefox: Visit the Mozilla Firefox project online:
+firefox:   http://www.mozilla.org/projects/firefox/
+firefox:
+firefox:
diff --git a/heavybuilds/firefox/slack-required b/heavybuilds/firefox/slack-required
new file mode 100644
index 0000000..3922905
--- /dev/null
+++ b/heavybuilds/firefox/slack-required
@@ -0,0 +1,24 @@
+zip
+unzip
+yasm
+libevent
+zlib
+alsa-lib
+libpng
+libogg
+libvorbis
+icu
+libvpx
+hunspell
+python2
+diffutils
+llvm
+imake
+libXt
+gtk2
+dbus-glib
+ffmpeg
+clang
+nodejs
+mozilla-nss
+lld
diff --git a/heavybuilds/firefox/stab.h b/heavybuilds/firefox/stab.h
new file mode 100644
index 0000000..6f70af3
--- /dev/null
+++ b/heavybuilds/firefox/stab.h
@@ -0,0 +1,71 @@
+/*	$OpenBSD: stab.h,v 1.3 2003/06/02 19:34:12 millert Exp $	*/
+/*	$NetBSD: stab.h,v 1.4 1994/10/26 00:56:25 cgd Exp $	*/
+
+/*-
+ * Copyright (c) 1991 The Regents of the University of California.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the University nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software
+ *    without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ *	@(#)stab.h	5.2 (Berkeley) 4/4/91
+ */
+
+#ifndef _STAB_H_
+#define _STAB_H_
+
+/*
+ * The following are symbols used by various debuggers and by the Pascal
+ * compiler.  Each of them must have one (or more) of the bits defined by
+ * the N_STAB mask set.
+ */
+
+#define	N_GSYM		0x20	/* global symbol */
+#define	N_FNAME		0x22	/* F77 function name */
+#define	N_FUN		0x24	/* procedure name */
+#define	N_STSYM		0x26	/* data segment variable */
+#define	N_LCSYM		0x28	/* bss segment variable */
+#define	N_MAIN		0x2a	/* main function name */
+#define	N_PC		0x30	/* global Pascal symbol */
+#define	N_RSYM		0x40	/* register variable */
+#define	N_SLINE		0x44	/* text segment line number */
+#define	N_DSLINE	0x46	/* data segment line number */
+#define	N_BSLINE	0x48	/* bss segment line number */
+#define	N_SSYM		0x60	/* structure/union element */
+#define	N_SO		0x64	/* main source file name */
+#define	N_LSYM		0x80	/* stack variable */
+#define	N_BINCL		0x82	/* include file beginning */
+#define	N_SOL		0x84	/* included source file name */
+#define	N_PSYM		0xa0	/* parameter variable */
+#define	N_EINCL		0xa2	/* include file end */
+#define	N_ENTRY		0xa4	/* alternate entry point */
+#define	N_LBRAC		0xc0	/* left bracket */
+#define	N_EXCL		0xc2	/* deleted include file */
+#define	N_RBRAC		0xe0	/* right bracket */
+#define	N_BCOMM		0xe2	/* begin common */
+#define	N_ECOMM		0xe4	/* end common */
+#define	N_ECOML		0xe8	/* end common (local name) */
+#define	N_LENG		0xfe	/* length of preceding entry */
+
+#endif /* !_STAB_H_ */
diff --git a/heavybuilds/firefox/symboltable.patch b/heavybuilds/firefox/symboltable.patch
new file mode 100644
index 0000000..36b41cc
--- /dev/null
+++ b/heavybuilds/firefox/symboltable.patch
@@ -0,0 +1,10 @@
+--- a/gfx/angle/checkout/src/compiler/translator/SymbolTable.h	2021-12-18 20:08:37.201922846 +0000
++++ b/gfx/angle/checkout/src/compiler/translator/SymbolTable.h	2021-12-18 20:07:06.059597581 +0000
+@@ -30,6 +30,7 @@
+ //   are tracked in the intermediate representation, not the symbol table.
+ //
+ 
++#include <cmath>
+ #include <limits>
+ #include <memory>
+ #include <set>
diff --git a/heavybuilds/firefox/vendor.js b/heavybuilds/firefox/vendor.js
new file mode 100644
index 0000000..d8d606b
--- /dev/null
+++ b/heavybuilds/firefox/vendor.js
@@ -0,0 +1,9 @@
+// Use LANG environment variable to choose locale
+pref("intl.locale.matchOS", true);
+
+// Disable default browser checking.
+pref("browser.shell.checkDefaultBrowser", false);
+
+// Don't disable our bundled extensions in the application directory
+pref("extensions.autoDisableScopes", 11);
+pref("extensions.shownSelectionUI", true);
diff --git a/heavybuilds/ssb.heavybuilds.SMBuild b/heavybuilds/ssb.heavybuilds.SMBuild
new file mode 100755
index 0000000..e85b0c4
--- /dev/null
+++ b/heavybuilds/ssb.heavybuilds.SMBuild
@@ -0,0 +1,265 @@
+#!/bin/bash
+# Version: 1.7 GSB Section SMBuild - Do not remove this line!
+# Copyright (c) 2007, 2008:
+#   Darren 'Tadgy' Austin <darren (at) gnomeslackbuild.org>, Coventry, UK.
+# Copyright (c) 2019-2022 PktSurf <smlinux@pktsurf.in>
+# Licenced under the terms of the GNU General Public Licence version 3.
+#
+# Modified and trimmed extensively for use with SMLinux distribution
+# http://git.pktsurf.in/smlinux
+
+# Prevent users from directly executing this section autobuild file. The whole build 
+# process has to be initiated from the main autobuild file.
+if [ -z "$autobuild" ] ; then
+  echo "Please invoke the main ssb.SMBuild file rather than this section build file because"
+  echo "it has the required functions that are exported to this section build file during"
+  echo "the build process"
+  exit 1
+fi
+
+. /etc/bldpkg.conf
+
+if [ -n "$autobuildtemp" ] ; then
+  autobuildtemp="$(echo $autobuildtemp)"
+  export autobuildtemp
+fi
+
+colours=0
+export colours
+
+# Make sure we are in the right directory (you can never trust users..)
+cd $( cd ${BASH_SOURCE%/*} ; pwd )
+
+# Section name.
+# This should not need to be changed unless the auto detection fails.
+section="$( basename $( pwd ) )"
+export section
+
+if [ ! -f .buildlist."$section" ]; then
+	echo ""
+	echo "**********************************************************************"
+	echo "The buildlist either doesn't exist, or is of a different architecture."
+	echo "** .buildlist.$section is needed **"
+	echo "Exiting!"
+	echo "**********************************************************************"
+	exit 1
+fi
+
+# Packages to build.
+# The package list is read in from .buildlist in the current directory, with
+# any comments and blank lines removed.
+packages="$( egrep -v "^#|^$" .buildlist."$section" | cut -d'#' -f1 )"
+
+function list_packages() {
+  local package
+  echo "The following packages are built in this section, listed in processing order:"
+
+  ( for package in $packages
+    do
+      echo -n "$package, "
+    done ) | sed -e 's/, $//' | fmt -w 74 | sed -e 's/^/    /g'
+}
+
+function find_package_files() {
+  # $1 = Directory to look for files in [required]
+  # $2 = Package name or regex to match.  An empty string matches all.
+  # $3 = Package version or regex to match.  An empty string matches all.
+  # $4 = Package architecture or regex to match.  An empty string matches all.
+  # $5 = Package build tag or regex to match.  An empty string matches all.
+  # $6 = File extension or regex to match.  An empty string means no extension.
+  # Note: Remember to escape any regex characters used in fixed strings.
+
+  [ -z "$1" ] || [ ! -d "$1" ] && return 1
+  find $1 -maxdepth 1 -mindepth 1 2>/dev/null | \
+    egrep "^.*/(${2:-.*})(-${3:-[^-]*})(-${4:-[^-]*})(-${5:-[^-.]*})($6)$" 2>/dev/null
+  return $?
+}
+
+# Environment.
+packagesdir=${packagesdir:-/$arch}
+export packagesdir
+
+# Option defaults.
+nopatchesdir=0
+noinstall=0
+
+# This check compares a list of source directories with the list of the
+# packages in the build list and warns of any missing package names 
+# in either of the two.
+
+dirtempfile=$(mktemp $parenttmp/DIRECTORYNAMES."$section".XXXXXX)
+dirfiletemppath="$dirtempfile"
+dirlist=$(find . -type d -maxdepth 1 -mindepth 1 | sed 's@./@@' | sort > $dirfiletemppath)
+
+packtempfile=$(mktemp $parenttmp/BUILDFILENAMES."$section".XXXXXX)
+packfiletemppath="$packtempfile"
+sort .buildlist.$section > $packfiletemppath
+  
+directorycount="$( wc -l < $dirtempfile )"
+buildlistcount="$( wc -l < $packtempfile )"
+
+# Get number of total packages
+totalpkgnumber="$(wc -l < .buildlist.$section)"
+export totalpkgnumber
+
+if diff -u "$dirfiletemppath" "$packfiletemppath" > /dev/null 2>&1 ; then
+  diffstatus="0"
+else
+  diffstatus="1"
+fi
+
+if [ "$diffstatus" != "0" ]; then 
+  echo "*********************************************************************"
+  echo "** Warning: In section '"$section"', the number of packages in the"
+  echo "** hidden file '.buildlist."$section"' is different to the number of"
+  echo "** package directories. Some packages may not have been added to"
+  echo "** this file/section directory. They are listed below:"
+  echo ""
+
+  diff -u "$dirfiletemppath" "$packfiletemppath" || true
+  echo ""
+  diff -u "$packfiletemppath" "$dirfiletemppath" || true
+
+  echo ""
+  echo "** Building anyways :-) "
+  echo "*********************************************************************"
+  sleep 2
+
+fi
+rm -f $packfiletemppath $dirfiletemppath
+
+# Parse command line arguments.
+while [ $# -gt 0 ]; do
+  if [ "$1" = "-help" ] || [ "$1" = "--help" ]; then
+    usage
+    exit 0
+  elif [ "$1" = "-list" ] || [ "$1" = "--list" ]; then
+    list_packages
+    exit 0
+    shift
+  else
+    echo "${0##*/}: Unknown option: $1"
+    echo "Try: $0 --help"
+    exit 1
+  fi
+done
+
+# Temporary space, package and log file storage.
+mkdir -p $pkgdest $logsdir/$section
+
+      echo "*********************************************************************"
+      echo "** Building section '$section'..."
+      echo "*********************************************************************"
+
+# Process packages.
+( for package in $packages
+  do
+    # Build defaults.
+    skip_build=0
+    subdir=$packagesdir/$section
+
+      echo "*********************************************************************"
+      echo "*** Processing package '$package'..."
+      echo "*********************************************************************"
+
+    # Sanity checks.
+    [ ! -e "$package/$package.SMBuild" ] && {
+      echo "*********************************************************************"
+      echo "*** Error: '$package.SMBuild' not found."
+      echo "*********************************************************************"
+      exit 1
+    }
+    [ ! -x "$package/$package.SMBuild" ] && {
+      echo "*********************************************************************"
+      echo "*** Error: '$package.SMBuild' is not executable."
+      echo "*********************************************************************"
+      exit 1
+    }
+
+    # Get package version and build numbers from the package SMBuild.
+    source "$package/$package.SMBuild"
+
+    # Check that we got a version and build.
+    [ -z "$version" ] || [ -z "$build" ] && {
+      echo "*********************************************************************"
+      echo "*** Error: failed to get version or build from '$package.SMBuild'"
+      echo "*********************************************************************"
+      exit 1
+    }
+
+    # Check if the package should be rebuilt, and where it should be put.
+    # The assumption is to always rebuild and put packages in the main
+    # directory, unless modified by the checks below.
+    if find_package_files "$pkgdest/$subdir" "${package//+/\+}" \
+      "" "" "" "\.$pkgext" >/dev/null
+    then
+      if find_package_files "$pkgdest/$subdir" "${package//+/\+}" \
+        "${version//-/_}" "" "$build" "\.$pkgext" >/dev/null
+      then
+        # Package with same version/build was found in the main directory.
+        skip_build=1
+      fi
+    fi
+
+    # Build package if required.
+    if [ "$skip_build" = "0" ]; then
+      echo "*********************************************************************"
+      echo "*** Building package '$package'..."
+      echo "*********************************************************************"
+      # Get the current package number from the build list
+      currentpkgnumber="$(grep -wn "$package" .buildlist.$section | cut -d: -f 1)"
+      export currentpkgnumber
+      mkdir -p $pkgdest/$subdir
+      ( cd $package && export pkgdest=$pkgdest/$subdir &&
+        bldpkg 2>&1 ) | \
+        tee $logsdir/$section/$package-$section-$HOSTTYPE.log.txt
+      # Unset $CURRENTPKGNUMBER. We don't want issues when a new one comes in
+      err=${PIPESTATUS[0]}
+      if [ "$err" != "0" ] ; then 
+        unset currentpkgnumber
+        echo "*** Error: '$package' build failed."
+        exit $err
+      else
+        unset currentpkgnumber
+        mv $logsdir/$section/$package-$section-$HOSTTYPE.log.txt \
+          $logsdir/$section/$package-$version-$build-$section-$HOSTTYPE.log.txt
+      fi
+    else
+      echo "*********************************************************************"
+      echo "*** Skipping build of '$package' - package up to date."
+      echo "*********************************************************************"
+
+    fi
+
+    if [ "$noinstall" = "0" ]; then
+      echo
+      echo "*********************************************************************"
+      echo "*** Installing '$package'..."
+      echo "*********************************************************************"
+      upgradepkg --install-new $( find_package_files "$pkgdest/$subdir" \
+        "${package//+/\+}" "${version//-/_}" "" "$build" "\.$pkgext" ) || {
+        echo
+        echo "*********************************************************************"
+        echo "*** Error: failed to install '$package'."
+        echo "*********************************************************************"
+        exit 1
+      }
+    else
+      echo
+      echo "*********************************************************************"
+      echo "*** Warning: not installing '$package'."
+      echo "*********************************************************************"
+    fi
+  done
+
+  echo "*********************************************************************"
+  echo "** Finished building section '$section'."
+  echo "** SMLinux packages are in '$pkgdest/$arch/$section'."
+  echo "** Section build logs are in '$logsdir/$section'."
+  echo "*********************************************************************"
+  echo "** Section build time was $( runtime $SECONDS )"
+  echo "*********************************************************************"
+) 2>&1 | tee $logsdir/$section-$arch.log.txt
+
+# Return the exit status from the sub-shell, not the tee command.
+exit ${PIPESTATUS[0]}