Index: lib/StaticAnalyzer/Core/RegionStore.cpp
===================================================================
--- lib/StaticAnalyzer/Core/RegionStore.cpp
+++ lib/StaticAnalyzer/Core/RegionStore.cpp
@@ -1282,6 +1282,8 @@
         const SymbolicRegion *SR = cast<SymbolicRegion>(MR);
         T = SR->getSymbol()->getType();
       }
+      if (T->isAnyPointerType() || T->isReferenceType())
+        T = T->getPointeeType();
     }
     MR = GetElementZeroRegion(MR, T);
   }