On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses