Definition lseg_cons (ls: listspec list_structid list_link list_token) dsh psh
(l: list val) (x z: val) : mpred :=
!! (~ ptr_eq x z) &&
EX h:(elemtype ls), EX r:list val, EX y:val,
!!(l=x::r  /\ is_pointer_or_null y) &&
list_token dsh x * list_cell ls dsh h x *
field_at psh list_struct (StructField list_link :: nil) (valinject (nested_field_type list_struct (StructField list_link :: nil)) y) x *
lseg ls dsh psh r y z.

(* Specifications: *)
Lemma lseg_unroll (ls: listspec list_structid list_link list_token): forall dsh psh l x z ,
~ (readable_share dsh) ->
lseg ls dsh psh l x z =
(!! (ptr_eq x z) && !! (l=nil) && emp) || lseg_cons ls dsh psh l x z.
Lemma lseg_unroll_nonempty1 (ls: listspec list_structid list_link list_token):
forall p P dsh psh h tail v1 v2,
~ (readable_share dsh) ->
~ ptr_eq v1 v2 ->
is_pointer_or_null p ->
P |-- list_token dsh v1 * list_cell ls dsh h v1 *
(field_at psh list_struct (StructField list_link :: nil)
(valinject (nested_field_type list_struct (StructField list_link :: nil)) p) v1 *
lseg ls dsh psh tail p v2) ->
P |-- lseg ls dsh psh (v1::tail) v1 v2.
Lemma lseg_neq (ls: listspec list_structid list_link list_token):
forall dsh psh s v v2,
~ (readable_share dsh) ->
ptr_neq v v2 ->
lseg ls dsh psh s v v2 = lseg_cons ls dsh psh s v v2.