Fix bug in CardTable::ModifyCardsAtomic.

We were passing in the wrong card address when handling unaligned
cards near the end of the scan range. This resulted in occasional
heap corruption according to heap verification. Also added
rounding to handle non card aligned scan end.

Change-Id: I1ff13c35bacb89716dac5826fdb5919d1c00e0e3