Section LIST.
Context {cs: compspecs}.
Context  {list_structid: ident} {list_link: ident} {list_token: share -> val -> mpred}.
Definition lseg (ls: listspec list_structid list_link list_token) (sh: share)
(contents: list (elemtype ls)) (x y: val) : mpred :=
EX al:list (val*elemtype ls),
!! (contents = map snd al) &&
LsegGeneral.lseg ls sh sh al x y.
Definition lseg_cons (ls: listspec list_structid list_link list_token) sh (l: list (elemtype ls)) (x z: val) : mpred :=
!! (~ ptr_eq x z) &&
EX h:(elemtype ls), EX r:list (elemtype ls), EX y:val,
!!(l=h::r  /\ is_pointer_or_null y) &&
list_token sh x * list_cell ls sh h x *
field_at sh list_struct (StructField list_link :: nil) (valinject (nested_field_type list_struct (StructField list_link :: nil)) y) x *
lseg ls sh r y z.
intros. rewrite lseg_unroll.
apply pred_ext. apply orp_left; auto.
rewrite andp_assoc.
do 2 (apply derives_extract_prop; intro).
congruence.
apply orp_right2. auto.
Qed.
Definition lseg_cons_right (ls: listspec list_structid list_link list_token)
sh (l: list (elemtype ls)) (x z: val) : mpred :=
!! (~ ptr_eq x z) &&
EX h:(elemtype ls), EX r:list (elemtype ls), EX y:val,
!!(l=r++(h::nil) /\ is_pointer_or_null y)  &&
list_token sh y * list_cell ls sh h y *
field_at sh list_struct (StructField list_link :: nil) (valinject (nested_field_type list_struct (StructField list_link :: nil)) z) y *
lseg ls sh r x y.
Abort.  (* not likely true *)
Definition lseg_cell (ls: listspec list_structid list_link list_token)
(sh : share)
(v: elemtype ls) (x y: val) :=
!!is_pointer_or_null y && list_token sh x * list_cell ls sh v x * field_at sh list_struct (StructField list_link :: nil) (valinject (nested_field_type list_struct (StructField list_link :: nil)) y) x.
End LIST.
Hint Rewrite @lseg_nil_eq : norm.
Hint Rewrite @lseg_eq using reflexivity: norm.
Hint Resolve @lseg_local_facts : saturate_local.
Ltac resolve_lseg_valid_pointer :=
match goal with
| |- ?Q |-- valid_pointer ?p =>
match Q with context [lseg ?A ?B ?C p ?q] =>
repeat rewrite <- sepcon_assoc;
pull_right (lseg A B C p q);
apply lseg_valid_pointer; [auto | reflexivity | ];
auto 50 with valid_pointer
end
end.
Hint Extern 10 (_ |-- valid_pointer _) =>
resolve_lseg_valid_pointer : valid_pointer.

Lemma list_cell_local_facts:
forall {cs: compspecs} {list_structid list_link: ident}{list_token}
(ls: listspec list_structid list_link list_token) sh v p,
list_cell ls sh v p |-- !! field_compatible list_struct nil p.