Local Open Scope pred.
(* Scall *)
Fixpoint alloc_juicy_variables (ge: genv) (rho: env) (jm: juicy_mem) (vl: list (ident*type)) : env * juicy_mem :=
match vl with
| nil => (rho,jm)
| (id,ty)::vars => match JuicyMemOps.juicy_mem_alloc jm 0 (@sizeof ge ty) with
(m1,b1) => alloc_juicy_variables ge (PTree.set id (b1,ty) rho) m1 vars
end
end.
Definition substopt {A} (ret: option ident) (v: val) (P: environ -> A)  : environ -> A :=
match ret with
| Some id => subst id v P
| None => P
end.
Definition freeable_blocks: list (block * BinInt.Z * BinInt.Z) -> mpred :=
fold_right (fun (bb: block*BinInt.Z * BinInt.Z) a =>
match bb with (b,lo,hi) =>
sepcon (VALspec_range (hi-lo) Share.top (b,lo)) a
end)
emp.
Inductive free_list_juicy_mem:
forall  (jm: juicy_mem) (bl: list (block * BinInt.Z * BinInt.Z))
(jm': juicy_mem), Prop :=
| FLJM_nil: forall jm, free_list_juicy_mem jm nil jm
| FLJM_cons: forall jm b lo hi bl jm2 jm'
(H: free (m_dry jm) b lo hi = Some (m_dry jm2))
(H0 : forall ofs : Z,
lo <= ofs < hi ->
perm_of_res (m_phi jm @ (b, ofs)) = Some Freeable),
free_juicy_mem jm (m_dry jm2) b lo hi H = jm2 ->
free_list_juicy_mem jm2 bl jm' ->
free_list_juicy_mem jm ((b,lo,hi)::bl) jm'.
Definition maybe_retval (Q: environ -> mpred) retty ret :=
match ret with
| Some id => fun rho => Q (get_result1 id rho)
| None =>
match retty with
| Tvoid => (fun rho => Q (globals_only rho))
| _ => fun rho => EX v: val, Q (make_args (ret_temp::nil) (v::nil) rho)
end
end.
Definition tc_fn_return (Delta: tycontext) (ret: option ident) (t: type) :=
match ret with
| None => True
| Some i => match (temp_types Delta) ! i with Some t' => t=t' | _ => False end
end.
Definition thisvar (ret: option ident) (i : ident) : Prop :=
match ret with None => False | Some x => x=i end.
(* bind_parameter_temps params args (create_undef_temps (fn_temps f)) = Some te' -> alloc_juicy_variables psi empty_env jmx (fn_vars f) = (ve', jm'') -> P ts x (make_args (map fst (fst fsig)) args (construct_rho (filter_genv psi) vx tx)) |-- close_precondition (map fst (fst fsig)) (map fst params) (P ts x) (construct_rho (filter_genv psi) ve' te') *)
Definition globals_only (rho: environ) : environ := (mkEnviron (ge_of rho) (Map.empty _) (Map.empty _)).
Fixpoint make_args' (il: list ident) (vl: list val)  : tenviron :=
match il, vl with
| i::il', v::vl' => Map.set i v (make_args' il' vl')
| _, _ => Map.empty _
end.

Lemma semax_call {CS Espec}:
forall Delta (A: TypeTree)
(P Q : forall ts, dependent_type_functor_rec ts (AssertTT A) mpred)
(NEP: super_non_expansive P) (NEQ: super_non_expansive Q)
(ts: list Type) (x : dependent_type_functor_rec ts A mpred)
F ret argsig retsig cc a bl,
Cop.classify_fun (typeof a) =
Cop.fun_case_f (type_of_params argsig) retsig cc ->
(retsig = Tvoid -> ret = None) ->
tc_fn_return Delta ret retsig ->
@semax CS Espec Delta
(fun rho => (|>(tc_expr Delta a rho && tc_exprlist Delta (snd (split argsig)) bl rho))  &&
(func_ptr (mk_funspec (argsig,retsig) cc A P Q NEP NEQ) (eval_expr a rho) &&
(|>(F rho * P ts x (make_args (map (@fst  _ _) argsig)
(eval_exprlist (snd (split argsig)) bl rho) rho )))))
(Scall ret a bl)
(normal_ret_assert
(fun rho => (EX old:val, substopt ret old F rho * maybe_retval (Q ts x) retsig ret rho))).