Issues using boofuzz in QEMU mode

[Akshata-Thole]

Hello,
I am trying to use boofuzz in QEMU mode and I get the following error trace :

Traceback (most recent call last):
  File "ftp.py", line 208, in <module>
    main_helper(click_command=ftp)
  File "~/boofuzz/boofuzz/cli.py", line 253, in main_helper
    main()
  File "~/boofuzz/boofuzz/cli.py", line 243, in main
    cli()
  File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 1128, in __call__
    return self.main(*args, **kwargs)
  File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 1053, in main
    rv = self.invoke(ctx)
  File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 1659, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 1659, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 1628, in _process_result
    value = ctx.invoke(self._result_callback, value, **ctx.params)
  File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 754, in invoke
    return __callback(*args, **kwargs)
  File "~/boofuzz/boofuzz/cli.py", line 212, in fuzzcallback
    session.fuzz(name=test_case_name, max_depth=max_depth, qemu=qemu)
  File "~/boofuzz/boofuzz/sessions.py", line 1352, in fuzz
    self._main_fuzz_loop(self._generate_mutations_feedback(), qemu=qemu)
  File "~/boofuzz/boofuzz/sessions.py", line 1473, in _main_fuzz_loop
    raise Exception("Fuzzing with qemu mode but no QEMU debugger found")
**Exception: Fuzzing with qemu mode but no QEMU debugger found**

I have used the following run command :
python3 ftp.py fuzz --web-port 26000 --target <target_ip>:<port> --stdout hide --restart-interval 32000 --target-start-wait 3.5 --qemu ftp --username <username>--password <password>

Based on my debugging, I see that in sessions.py to attach the debugger, it is using monitors that have been passed. However, I am not sure how qemu is being passed as a monitor to get attached as a debugger.

Relevant code in sessions.py:

if qemu:
    debugger = None
    for monitor in self.targets[0].monitors:
        if hasattr(monitor, "debugger_thread"):
            debugger = monitor.debugger_thread
            shm_map = debugger.shm_mv
    if debugger is None:
        raise Exception("Fuzzing with qemu mode but no QEMU debugger found")
    if shm_map is None:
        raise Exception("QEMU Debugger has no initialized shm_mv")
    global_map = bytearray(b"\xFF" * len(shm_map))

@jtpereyda Can I get some help in running this correctly?