Fixes bug where MessagePumpMojo was listening for state on the wrong handle

mojo/common/message_pump_mojo.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "mojo/common/message_pump_mojo.h"
 
 #include <algorithm>
 #include <vector>
 
 #include "base/logging.h"
@@ skipping 166 matching lines @@
   if (!run_state_)
     return;
 
   // TODO(sky): deal with error?
   MojoWriteMessage(run_state_->write_handle(), NULL, 0, NULL, 0,
                    MOJO_WRITE_MESSAGE_FLAG_NONE);
 }
 
 MessagePumpMojo::WaitState MessagePumpMojo::GetWaitState() const {
   WaitState wait_state;
-  wait_state.handles.push_back(run_state_->write_handle());
+  wait_state.handles.push_back(run_state_->read_handle());
   wait_state.wait_flags.push_back(MOJO_WAIT_FLAG_READABLE);
 
   for (HandleToHandler::const_iterator i = handlers_.begin();
        i != handlers_.end(); ++i) {
     wait_state.handles.push_back(i->first);
     wait_state.wait_flags.push_back(i->second.wait_flags);
   }
   return wait_state;
 }
 
 }  // namespace common
 }  // namespace mojo