Local Open Scope pred.
(* Scall *)
Fixpoint alloc_juicy_variables (ge: genv) (rho: env) (jm: juicy_mem) (vl: list (ident*type)) : env * juicy_mem :=
match vl with
| nil => (rho,jm)
| (id,ty)::vars => match JuicyMemOps.juicy_mem_alloc jm 0 (@sizeof ge ty) with
(m1,b1) => alloc_juicy_variables ge (PTree.set id (b1,ty) rho) m1 vars
end
end.
Definition substopt {A} (ret: option ident) (v: val) (P: environ -> A)  : environ -> A :=
match ret with
| Some id => subst id v P
| None => P
end.
Definition freeable_blocks: list (block * BinInt.Z * BinInt.Z) -> mpred :=
fold_right (fun (bb: block*BinInt.Z * BinInt.Z) a =>
match bb with (b,lo,hi) =>
sepcon (VALspec_range (hi-lo) Share.top (b,lo)) a
end)
emp.
Inductive free_list_juicy_mem:
forall  (jm: juicy_mem) (bl: list (block * BinInt.Z * BinInt.Z))
(jm': juicy_mem), Prop :=
| FLJM_nil: forall jm, free_list_juicy_mem jm nil jm
| FLJM_cons: forall jm b lo hi bl jm2 jm'
(H: free (m_dry jm) b lo hi = Some (m_dry jm2))
(H0 : forall ofs : Z,
lo <= ofs < hi ->
perm_of_res (m_phi jm @ (b, ofs)) = Some Freeable),
free_juicy_mem jm (m_dry jm2) b lo hi H = jm2 ->
free_list_juicy_mem jm2 bl jm' ->
free_list_juicy_mem jm ((b,lo,hi)::bl) jm'.
Definition maybe_retval (Q: environ -> mpred) retty ret :=
match ret with
| Some id => fun rho => Q (get_result1 id rho)
| None =>
match retty with
| Tvoid => (fun rho => Q (globals_only rho))
| _ => fun rho => EX v: val, Q (make_args (ret_temp::nil) (v::nil) rho)
end
end.
Definition tc_fn_return (Delta: tycontext) (ret: option ident) (t: type) :=
match ret with
| None => True
| Some i => match (temp_types Delta) ! i with Some t' => t=t' | _ => False end
end.
Definition thisvar (ret: option ident) (i : ident) : Prop :=
match ret with None => False | Some x => x=i end.
(* bind_parameter_temps params args (create_undef_temps (fn_temps f)) = Some te' -> alloc_juicy_variables psi empty_env jmx (fn_vars f) = (ve', jm'') -> P ts x (make_args (map fst (fst fsig)) args (construct_rho (filter_genv psi) vx tx)) |-- close_precondition (map fst (fst fsig)) (map fst params) (P ts x) (construct_rho (filter_genv psi) ve' te') *)
Definition globals_only (rho: environ) : environ := (mkEnviron (ge_of rho) (Map.empty _) (Map.empty _)).
Fixpoint make_args' (il: list ident) (vl: list val)  : tenviron :=
match il, vl with
| i::il', v::vl' => Map.set i v (make_args' il' vl')
| _, _ => Map.empty _
end.

Lemma jsafeN_local_step':
forall {Espec: OracleKind} ge ora s1 m s2 m2,
cl_step  ge s1 (m_dry m) s2 (m_dry m2) ->
resource_decay (nextblock (m_dry m)) (m_phi m) (m_phi m2) ->
level m = S (level m2) /\
ghost_of (m_phi m2) =ghost_fmap (approx (level m2)) (approx (level m2)) (ghost_of (m_phi m)) ->
jsafeN (@OK_spec Espec) ge (level m2) ora s2 m2 ->
jsafeN (@OK_spec Espec) ge (level m) ora s1 m.