diff --git a/package/network/services/ead/src/pw_encrypt_md5.c b/package/network/services/ead/src/pw_encrypt_md5.c
index bc9f249fda5885..85682b2f0033fb 100644
--- a/package/network/services/ead/src/pw_encrypt_md5.c
+++ b/package/network/services/ead/src/pw_encrypt_md5.c
@@ -555,7 +555,6 @@ md5_crypt(char passwd[MD5_OUT_BUFSIZE], const unsigned char *pw, const unsigned
 		__md5_Update(&ctx, final, pl > 16 ? 16 : pl);
 
 	/* Don't leave anything around in vm they could use. */
-//TODO: the above comment seems to be wrong. final is used later.
 	memset(final, 0, sizeof(final));
 
 	/* Then something really weird... */