The directoyr contains C code that are intentinally vulnerable. This is to test if they can be deteced with static code analyzer.