Robustness Verification for Classifier Ensembles