In the function traversal routine, I forgot to traverse the function
type itself.  Doing this avoids a crash when an array has an unknown
length.  Bootstrapped and tested on x86_64-unknown-linux-gnu.  Committed
to mainline.

Ian