See:
https://en.wikipedia.org/wiki/GNU_IceCat
They basically use scripts that build IceCat apparently from the original source code. I'm guessing they diff against FireFox.