Benchmarking Adversarial Patch Selection and Location