Limits of Machine Learning for Automatic Vulnerability Detection