(** Valid values are the ones that have no pointers outside the domain of f*)
  Definition valid_val (f: memren) (v : val) : Prop :=
    match v with
    | Vptr b _ =>
      exists b', f b = Some b'
    | _ => True
    end.Definition valid_memval (f: memren) (mv : memval) : Prop :=
    match mv with
    | Fragment v _ _ =>
      valid_val f v
    | _ => True
    end.

Lemma valid_mem_loadbytes: forall m b ofs sz mv f (Hwd: valid_mem m) (Hsz: sz >= 0) (Hdomain: domain_memren f m) (Hload: Mem.loadbytes m b ofs sz = Some mv), valid_memval_list f mv.