[Sync] Fix bug in JsSyncManagerObserver leading to erroneous change info.

chrome/browser/sync/js_sync_manager_observer.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/sync/js_sync_manager_observer.h"
 
 #include <cstddef>
 
 #include "base/logging.h"
 #include "base/values.h"
@@ skipping 16 matching lines @@
     syncable::ModelType model_type,
     const sync_api::BaseTransaction* trans,
     const sync_api::SyncManager::ChangeRecord* changes,
     int change_count) {
   ListValue return_args;
   return_args.Append(Value::CreateStringValue(
       syncable::ModelTypeToString(model_type)));
   ListValue* change_values = new ListValue();
   return_args.Append(change_values);
   for (int i = 0; i < change_count; ++i) {
-    change_values->Append(changes->ToValue(trans));
+    change_values->Append(changes[i].ToValue(trans));
   }
   parent_router_->RouteJsEvent("onChangesApplied",
                                JsArgList(return_args), NULL);
 }
 
 void JsSyncManagerObserver::OnChangesComplete(
     syncable::ModelType model_type) {
   ListValue return_args;
   return_args.Append(Value::CreateStringValue(
       syncable::ModelTypeToString(model_type)));
@@ skipping 60 matching lines @@
 void JsSyncManagerObserver::OnClearServerDataSucceeded() {
   parent_router_->RouteJsEvent("onClearServerDataSucceeded",
                                JsArgList(), NULL);
 }
 
 void JsSyncManagerObserver::OnClearServerDataFailed() {
   parent_router_->RouteJsEvent("onClearServerDataFailed", JsArgList(), NULL);
 }
 
 }  // namespace browser_sync