下面的程序會輸出什么？

    NSMutableArray *ary = [[NSMutableArray array] retain];
    NSString *str = [NSString stringWithFormat:@"123456789"];
    NSString *longStr = [NSString stringWithFormat:@"1234567890"];
    
    [str retain];
    [longStr retain];
    [ary addObject:str];
    [ary addObject:longStr];
    
    NSLog(@"str = %ld", (unsigned long)[str retainCount]);
    NSLog(@"longStr = %ld", (unsigned long)[longStr retainCount]);
    
    [str retain];
    [str release];
    [str release];
    [longStr retain];
    [longStr release];
    [longStr release];
    
    NSLog(@"str = %ld", (unsigned long)[str retainCount]);
    NSLog(@"longStr = %ld", (unsigned long)[longStr retainCount]);
    [ary removeAllObjects];
    NSLog(@"str = %ld", (unsigned long)[str retainCount]);
    NSLog(@"longStr = %ld", (unsigned long)[longStr retainCount]);

輸出結(jié)果

2018-07-03 13:54:59.951143+0800 BlockTestDemo[13502:2107264] str = -1
2018-07-03 13:54:59.951374+0800 BlockTestDemo[13502:2107264] longStr = 3
2018-07-03 13:54:59.951613+0800 BlockTestDemo[13502:2107264] str = -1
2018-07-03 13:54:59.951717+0800 BlockTestDemo[13502:2107264] longStr = 2
2018-07-03 13:54:59.951956+0800 BlockTestDemo[13502:2107264] str = -1
2018-07-03 13:54:59.952044+0800 BlockTestDemo[13502:2107264] longStr = 1

在網(wǎng)上搜索了一下，一般人給出的答案是：當(dāng)字符串長度小于10時，字符串是保存在常量區(qū)，沒有引用計數(shù)。如果長度大于等于10呢，就會被復(fù)制到堆去，有引用計數(shù)。

后來又出現(xiàn)了一個詞：Tagged Pointer 具體了解一下。 嘗試著輸出字符串的class，發(fā)現(xiàn)兩者的類名是不同的：

NSString *str = [NSString stringWithFormat:@"123456789"];
NSString *longStr = [NSString stringWithFormat:@"1234567890"];
NSLog(@"str %s %p", object_getClassName(str), str);
NSLog(@"longStr %s %p", object_getClassName(longStr), longStr);

2018-07-03 13:54:59.950804+0800 BlockTestDemo[13502:2107264] str NSTaggedPointerString 0xa1ea1f72bb30ab19
2018-07-03 13:54:59.950979+0800 BlockTestDemo[13502:2107264] longStr __NSCFString 0x60c000224f20

Tagged Pointer專門用來存儲小的對象，例如NSNumber和NSDate
Tagged Pointer指針的值不再是地址了，而是真正的值。所以，實際上它不再是一個對象了，它只是一個披著對象皮的普通變量而已。所以，它的內(nèi)存并不存儲在堆中，也不需要malloc和free。

這應(yīng)該也是上面的NSString在長度小于10的時候，沒有引用計數(shù)的原因了。

引申

這種情況引申出另外一道題：

@property (nonatomic, strong) NSString *strongStr;

dispatch_queue_t queue = dispatch_queue_create("strongStr", DISPATCH_QUEUE_CONCURRENT);
    for (int i = 0; i < 100000; i++) {
        dispatch_async(queue, ^{
            self.strongStr = [NSString stringWithFormat:@"ab %d", i];
        });
    }

如果將dispatch_async 里面的內(nèi)容改成：

self.strongStr = [NSString stringWithFormat:@"abcdefghijklmn %d", i];

會如何？
前者不會crash, 而后者會crash。
我們來看一下strongStr的setter方法：

- (void)setStrongStr:(NSString *)strongStr {
    if (strongStr == _strongStr) return;
    id pre = _strongStr;
    [strongStr retain];//1.先保留新值
    _strongStr = strongStr;//2.再進行賦值
    [pre release];//3.釋放舊值
}

結(jié)合上面的Tagged Pointer的解釋，調(diào)用retain or release時strongStr的引用計數(shù)一直都是-1;
而對于后者，strongStr實際上是一個對象，retain會使引用計數(shù)+1，release會使引用計數(shù) -1;
而對于多線程異步并行執(zhí)行setStrongStr方法，可能會出現(xiàn)這種情況：多個線程拿到同一個舊值，然后給strongStr賦值不同的新值，然后在對舊值的release時候，出現(xiàn)多次release，程序crash;