Investigating White-Box Attacks for On-Device Models