(*! Instantiation of modules *)
Set Bullet Behavior "Strict Subproofs".
(** * join_all and permutations *)
Section Machine.
Context {ge : Clight.genv}.
Definition getLocksR (tp : jstate ge) := listoption_inv (map snd (AMap.elements (lset tp))).
Definition maps tp := (getThreadsR tp ++ getLocksR tp)%list.

Lemma minus_plus a b c : a - (b + c) = a - b - c.