Missing use of db_prefix

In comment_notify_page:

      db_query("UPDATE {comments} c, users u                                    
          SET c.notify = 0
          WHERE u.uid = c.uid                                                     
          AND md5(concat(c.mail, ifnull(u.mail, u.init), c.uid, c.name, c.nid))\
 = '%s'",
        $arg
      );

it should be "UPDATE {comments} c, {users} u" in order for the tables to be prefixed properly.