diff --git a/ChangeLog b/ChangeLog
index 110a7e4471..1bc6422b57 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -42,6 +42,8 @@ Changes in version 0.2.1.1-alpha - 2008-??-??
       new entry guard connection. Bugfix on 0.1.2.8-beta; found by lodger.
     - Detect address changes correctly on non-directory mirror
       servers.  Fix for bug 652.
+    - Authorities correctly free policies on bad servers on
+      exit. Fixes bug 672.
 
   o Minor features:
     - Allow separate log levels to be configured for different logging
diff --git a/src/or/policies.c b/src/or/policies.c
index 2e66a00323..06ca6cdded 100644
--- a/src/or/policies.c
+++ b/src/or/policies.c
@@ -923,6 +923,10 @@ policies_free_all(void)
   authdir_reject_policy = NULL;
   addr_policy_list_free(authdir_invalid_policy);
   authdir_invalid_policy = NULL;
+  addr_policy_list_free(authdir_baddir_policy);
+  authdir_baddir_policy = NULL;
+  addr_policy_list_free(authdir_badexit_policy);
+  authdir_badexit_policy = NULL;
 
   if (!HT_EMPTY(&policy_root))
     log_warn(LD_MM, "Still had some address policies cached at shutdown.");