(** Valid values are the ones that have no pointers outside the domain of f*)
  Definition valid_val (f: memren) (v : val) : Prop :=
    match v with
    | Vptr b _ =>
      exists b', f b = Some b'
    | _ => True
    end.Definition valid_memval (f: memren) (mv : memval) : Prop :=
    match mv with
    | Fragment v _ _ =>
      valid_val f v
    | _ => True
    end.

Lemma restrPermMap_val_valid: forall m p (Hlt: permMapLt p (getMaxPerm m)) v, mem_wd.val_valid v m <-> mem_wd.val_valid v (restrPermMap Hlt).