Certifying Decision Trees Against Evasion Attacks by Program Analysis