fact: Definition mallocN_spec {CS: compspecs} := DECLARE _mallocN WITH n: Z PRE [tint] PROP (4 <= n <= Int.max_unsigned) PARAMS (Vint (Int.repr n)) GLOBALS () SEP () POST [ tptr tvoid ] EX v: pointer_val, PROP (malloc_compatible n (pointer_val_val v)) LOCAL (temp ret_temp (pointer_val_val v)) SEP (data_at_ Tsh (tarray tint (n / sizeof tint)) (pointer_val_val v) * free_tok (pointer_val_val v) n).
imports: VST.floyd.proofauto CertiGraph.binheap.binary_heap_pro