(* Lemma writable_unique_right sh : writable_share sh -> forall p, mk_lifted (Share.unrel Share.Rsh sh) p = pfullshare.  Lemma data_at_unfold CS sh b ofs phi length : forall (Hw: writable0_share sh), app_pred (@data_at_ CS sh (Tarray (Tpointer Tvoid noattr) (Z.of_nat length) noattr) (Vptr b ofs)) phi -> forall loc, if adr_range_dec (b, Ptrofs.intval ofs) (size_chunk Mptr * Z.of_nat length)%Z loc then exists v, phi @ loc = YES sh (writable0_readable Hw) (VAL v) NoneP else identity (phi @ loc).  Lemma data_at_unfold_weak CS sh b ofs phi z z' loc : readable_share sh -> app_pred (@data_at_ CS sh (Tarray (Tpointer Tvoid noattr) z noattr) (Vptr b ofs)) phi -> adr_range (b, Ptrofs.intval ofs) z' loc -> z' <= size_chunk Mptr * z -> exists p v, phi @ loc = YES sh p (VAL v) NoneP.  Lemma data_at_noghost CS sh b ofs phi : app_pred (@data_at_ CS sh (Tarray (Tpointer Tvoid noattr) 2 noattr) (Vptr b ofs)) phi -> noghost phi.  Definition rmap_makelock phi phi' loc R length := (level phi = level phi') /\ (forall x, ~ adr_range loc length x -> phi @ x = phi' @ x) /\ (forall x, adr_range loc length x -> exists val sh Psh, phi @ x = YES sh Psh (VAL val) NoneP /\ writable0_share sh /\ phi' @ x = YES sh Psh (LK length (snd x - snd loc)) (pack_res_inv (approx (level phi) R))) /\  (ghost_of phi = ghost_of phi').  (* rmap_freelock phi phi' is ALMOST rmap_makelock phi' phi but we specify that the VAL will be the dry memory's *)
Definition rmap_freelock phi phi' m loc R length :=
(level phi = level phi') /\
(forall x, ~ adr_range loc length x -> phi @ x = phi' @ x) /\
(forall x,
adr_range loc length x ->
exists sh Psh,
phi' @ x = YES sh Psh (VAL (contents_at m x)) NoneP /\
writable0_share sh /\
phi @ x =
YES sh Psh (LK length  (snd x - snd loc)) (pack_res_inv (approx (level phi) R))) /\
(ghost_of phi = ghost_of phi').
Definition makelock_f phi loc R length : address -> resource :=
fun x =>
if adr_range_dec loc length x then
match phi @ x with
| YES sh sh' (VAL _) _ =>
YES sh sh' (LK length (snd x - snd loc)) (pack_res_inv (approx (level phi) R))
| YES _ _ _ _
| PURE _ _
| NO _ _ => NO Share.bot bot_unreadable
end
else
phi @ x.
Definition freelock_f phi m loc length : address -> resource :=
fun x =>
if adr_range_dec loc length x then
match phi @ x with
| YES sh sh' (LK _ _) _ => YES sh sh' (VAL (contents_at m x)) NoneP
| YES _ _ _ _
| PURE _ _
| NO _ _ => NO Share.bot bot_unreadable
end
else
phi @ x.
(*The name is legacy. Comes from the time there was two shares. Then * The contradiction would look like * forall (sh2 sh3:pshares) -> join pfullshare sh2 sh3 -> False. *)
Local Ltac pfulltac := try solve [exfalso; eapply join_writable0_readable; eauto].

(* Specifications: *)
Lemma readable_part_writable0:
forall sh
(Hw : writable0_share sh)
(Hr : readable_share sh),
readable_part (Hr) =
exist _ _ pure_readable_Rsh.
Lemma rmap_makelock_join phi1 phi1' loc R length phi2 phi :
0 < length ->
rmap_makelock phi1 phi1' loc R length ->
join phi1 phi2 phi ->
exists phi',
rmap_makelock phi phi' loc R length /\
join phi1' phi2 phi'.
Lemma rmap_freelock_join phi1 phi1' m loc R length phi2 phi :
0 < length ->
rmap_freelock phi1 phi1' m loc R length ->
join phi1 phi2 phi ->
exists phi',
rmap_freelock phi phi' m loc R length /\
join phi1' phi2 phi'.