Alexander_Droste added a comment. > The memory region for the va_list that was obtained from the analyzer in same case was indeed an element region in the va_list checker. I fixed this issue, and now it works properly. Then this patch might be ready to commit. :) http://reviews.llvm.org/D16044