--- bind-9.2.4/bin/named/update.c..CVE-2009-0696	2009-07-29 07:04:23.000000000 -0300
+++ bind-9.2.4/bin/named/update.c	2009-07-29 07:15:57.000000000 -0300
@@ -780,7 +780,14 @@
 			type = t->rdata.type;
 			if (type == dns_rdatatype_sig)
 				covers = dns_rdata_covers(&t->rdata);
-			else
+			/* 20090729 adapted from ISC BIND-9.4.3-P3
+			** Durval Menezes <durval AT tmp DOT com DOT br
+			*/
+			else if (type == dns_rdatatype_any) {
+				dns_db_detachnode(db, &node);
+				dns_diff_clear(&trash);
+				return (DNS_R_NXRRSET);
+			} else
 				covers = 0;
 
 			/*
