To avoid calling PointerType::getElementType().
Without also examining the callee in Call->getParam*Type(), we may end
up seeing that we have a byval attribute on the callee, but only looking
at the caller argument attributes which could be missing the byval
attribute.
When does the 'Ty' come back as null? Would that only be it older bitcode, that should be auto-upgraded when loading?