Analyzing the Robustness of Nearest Neighbors to Adversarial Examples