Definition lseg_cell  (ls: listspec list_structid list_link list_token)
(dsh psh : share)
(v: elemtype ls) (x y: val) :=
!!is_pointer_or_null y && list_token dsh x * list_cell ls dsh v x * field_at psh list_struct (StructField list_link :: nil) (valinject (nested_field_type list_struct (StructField list_link :: nil)) y) x.

Lemma list_append: forall {dsh psh: share}
{ls : listspec list_structid list_link list_token} (hd mid tl:val) ct1 ct2 P,
(forall x tl', lseg_cell ls dsh psh x tl tl' * P tl |-- FF) ->
(lseg ls dsh psh ct1 hd mid) * lseg ls dsh psh ct2 mid tl * P tl|--
(lseg ls dsh psh (ct1 ++ ct2) hd tl) * P tl.