On Evaluating Adversarial Robustness of Large Vision-Language Models